Unsere Freiwilligen haben diesen Artikel noch nicht in Deutsch übersetzt. Machen Sie mit und helfen Sie, das zu erledigen!
Sie können den Artikel auch auf English (US) lesen.

The Access-Control-Expose-Headers response header indicates which headers can be exposed as part of the response by listing their names.

By default, only the 6 simple response headers are exposed:

If you want clients to be able to access other headers, you have to list them using the Access-Control-Expose-Headers header.

Header type Response header
Forbidden header name no

Syntax

Access-Control-Expose-Headers: <header-name>, <header-name>, ...

Directives

<header-name>
A list of exposed headers consisting of zero or more header names other than the simple response headers that the resource might use and can be exposed.

Examples

To expose a non-simple response header, you can specify:

Access-Control-Expose-Headers: Content-Length

To additionally expose a custom header, like X-Kuma-Revision, you can specify multiple headers separated by a comma:

Access-Control-Expose-Headers: Content-Length, X-Kuma-Revision

Specifications

Specification Status Comment
Fetch
The definition of 'Access-Control-Expose-Headers' in that specification.
Living Standard  

Browser compatibility

FeatureChromeEdgeFirefoxInternet ExplorerOperaSafari
Basic support4123.510124
FeatureAndroid webviewChrome for AndroidEdge mobileFirefox for AndroidIE mobileOpera AndroidiOS Safari
Basic support2.1 Yes Yes4 Yes123.2

Compatibility notes

See also

Schlagwörter des Dokuments und Mitwirkende

Schlagwörter: 
 Mitwirkende an dieser Seite: fscholz, Sebsonic
 Zuletzt aktualisiert von: fscholz,