Replace offensive words in CORS documentation (mdn#7396)

* Replaced offensive words in CORS documentation

* Removed redundant punctuation mark

Co-authored-by: André Jaenisch <[email protected]>

* Rephrased the definition of the Access-Control-Expose-Headers header

* Corrected the capitalization of JavaScript

Co-authored-by: André Jaenisch <[email protected]>

Author: idan22moral

files/en-us/web/http/cors/index.html

@@ -391,11 +391,11 @@ <h3 id="Access-Control-Allow-Origin">Access-Control-Allow-Origin</h3>
 <pre class="brush: none">Access-Control-Allow-Origin: https://mozilla.org
 Vary: Origin</pre>
 
-<p>If the server specifies a single origin (that may dynamically change based on the requesting origin as part of a white-list) rather than the "<code>*</code>" wildcard, then the server should also include <code>Origin</code> in the {{HTTPHeader("Vary")}} response header — to indicate to clients that server responses will differ based on the value of the {{HTTPHeader("Origin")}} request header.</p>
+<p>If the server specifies a single origin (that may dynamically change based on the requesting origin as part of a allowlist) rather than the "<code>*</code>" wildcard, then the server should also include <code>Origin</code> in the {{HTTPHeader("Vary")}} response header — to indicate to clients that server responses will differ based on the value of the {{HTTPHeader("Origin")}} request header.</p>
 
 <h3 id="Access-Control-Expose-Headers">Access-Control-Expose-Headers</h3>
 
-<p>The {{HTTPHeader("Access-Control-Expose-Headers")}} header lets a server whitelist headers that Javascript (such as {{domxref("XMLHttpRequest.getResponseHeader()","getResponseHeader()")}}) in browsers are allowed to access.</p>
+<p>The {{HTTPHeader("Access-Control-Expose-Headers")}} header adds the specified headers to the allowlist that JavaScript (such as {{domxref("XMLHttpRequest.getResponseHeader()","getResponseHeader()")}}) in browsers is allowed to access.</p>
 
 <pre class="brush: none">Access-Control-Expose-Headers: &lt;header-name&gt;[, &lt;header-name&gt;]*
 </pre>