diff --git a/src/main/java/org/codelibs/fess/cors/CorsHandler.java b/src/main/java/org/codelibs/fess/cors/CorsHandler.java
index acb01222d..240e34ad3 100644
--- a/src/main/java/org/codelibs/fess/cors/CorsHandler.java
+++ b/src/main/java/org/codelibs/fess/cors/CorsHandler.java
@@ -20,6 +20,18 @@ import javax.servlet.ServletResponse;
 
 public abstract class CorsHandler {
 
+    protected static final String ACCESS_CONTROL_ALLOW_ORIGIN = "Access-Control-Allow-Origin";
+
+    protected static final String ACCESS_CONTROL_ALLOW_HEADERS = "Access-Control-Allow-Headers";
+
+    protected static final String ACCESS_CONTROL_ALLOW_METHODS = "Access-Control-Allow-Methods";
+
+    protected static final String ACCESS_CONTROL_ALLOW_PRIVATE_NETWORK = "Access-Control-Allow-Private-Network";
+
+    protected static final String ACCESS_CONTROL_ALLOW_CREDENTIALS = "Access-Control-Allow-Credentials";
+
+    protected static final String ACCESS_CONTROL_MAX_AGE = "Access-Control-Max-Age";
+
     public abstract void process(String origin, ServletRequest request, ServletResponse response);
 
 }
diff --git a/src/main/java/org/codelibs/fess/cors/DefaultCorsHandler.java b/src/main/java/org/codelibs/fess/cors/DefaultCorsHandler.java
index 689be373c..d35cf2c62 100644
--- a/src/main/java/org/codelibs/fess/cors/DefaultCorsHandler.java
+++ b/src/main/java/org/codelibs/fess/cors/DefaultCorsHandler.java
@@ -25,16 +25,6 @@ import org.codelibs.fess.util.ComponentUtil;
 
 public class DefaultCorsHandler extends CorsHandler {
 
-    protected static final String ACCESS_CONTROL_ALLOW_CREDENTIALS = "Access-Control-Allow-Credentials";
-
-    protected static final String ACCESS_CONTROL_MAX_AGE = "Access-Control-Max-Age";
-
-    protected static final String ACCESS_CONTROL_ALLOW_HEADERS = "Access-Control-Allow-Headers";
-
-    protected static final String ACCESS_CONTROL_ALLOW_METHODS = "Access-Control-Allow-Methods";
-
-    protected static final String ACCESS_CONTROL_ALLOW_ORIGIN = "Access-Control-Allow-Origin";
-
     @PostConstruct
     public void register() {
         final CorsHandlerFactory factory = ComponentUtil.getCorsHandlerFactory();