You can move ahead. It's just a warning. But you would need to hardcode the values returned by

cors_allow_headers

in your CORS setting anyway.