Good stuff, thanks!
One suggestion: I see in request, preflight request, and preflight response, you've organized the headers into required and optional, while the response headers are not organized as such. Would be nice to show which are required for response headers.