[API Proposal]: Add `CorsPolicyBuilder.AllowAnyExposedHeader`

[alrz]

Background and Motivation

The header Access-Control-Expose-Headers supports wildcard as with other cors headers.

Proposed API

namespace Microsoft.AspNetCore.Cors.Infrastructure;

public class CorsPolicyBuilder
{
+    public CorsPolicyBuilder AllowAnyExposedHeader();
}

Usage Examples

policyBuilder.AllowAnyExposedHeader();

Alternative Designs

Risks

Just like AnyOrigins this is not gonna work with AllowCredentials. Perhaps an analyzer could flag misusage for both.