Bug 1654175 [wpt PR 24677] - [XHR] Replace whitelist with cors-safelisted, a=testonly