protected static final String ACCESS_CONTROL_ALLOW_METHODS = "Access-Control-Allow-Methods";

    /**
     * CORS header for allowing private network access.
     */
    protected static final String ACCESS_CONTROL_ALLOW_PRIVATE_NETWORK = "Access-Control-Allow-Private-Network";

    /**
     * CORS header for allowing credentials.
     */
    protected static final String ACCESS_CONTROL_ALLOW_CREDENTIALS = "Access-Control-Allow-Credentials";

        assertTrue("ACCESS_CONTROL_ALLOW_METHODS should be final", Modifier.isFinal(methodsField.getModifiers()));

        Field privateNetworkField = CorsHandler.class.getDeclaredField("ACCESS_CONTROL_ALLOW_PRIVATE_NETWORK");
        assertTrue("ACCESS_CONTROL_ALLOW_PRIVATE_NETWORK should be final", Modifier.isFinal(privateNetworkField.getModifiers()));

        Field credentialsField = CorsHandler.class.getDeclaredField("ACCESS_CONTROL_ALLOW_CREDENTIALS");

Shinsuke Sugaya <******@****.***> 1752740911 +0900

   * Access-Control-Allow-Private-Network}</a> header field name.
   *
   * @since 31.1
   */
  public static final String ACCESS_CONTROL_ALLOW_PRIVATE_NETWORK =
      "Access-Control-Allow-Private-Network";

  /** The HTTP {@code Access-Control-Allow-Credentials} header field name. */