Tests

Differential Revision: https://phabricator.services.mozilla.com/D178043

bugzilla-url: https://bugzilla.mozilla.org/show_bug.cgi?id=1687364
gecko-commit: 04c0e2ee9aa8586a241a926705230a63aafc7228
gecko-reviewers: necko-reviewers, valentin
diff --git a/fetch/api/cors/cors-preflight-star.any.js b/fetch/api/cors/cors-preflight-star.any.js
index e8cbc80..f9fb204 100644
--- a/fetch/api/cors/cors-preflight-star.any.js
+++ b/fetch/api/cors/cors-preflight-star.any.js
@@ -80,3 +80,7 @@
 preflightTest(false, true, "PATCH", "*", "patch", [])
 preflightTest(false, true, "patch", "*", "PATCH", [])
 preflightTest(true, true, "patch", "*", "patch", [])
+
+// "Authorization" header can't be wildcarded.
+preflightTest(false, false, "*", "*", "POST", ["Authorization", "123"])
+preflightTest(true, false, "*", "*, Authorization", "POST", ["Authorization", "123"])