search

vitvad / Access-Control-Allow-Origin

Chrome extension: https://chrome.google.com/webstore/detail/allow-control-allow-origi/nlfbmbojpeacfghkpbjhddihlkkiljbi
213 stars 73 forks source link

Doesn't set Access-Control-Expose-Headers for response headers #15

Closed mikehayesuk closed 9 years ago

mikehayesuk commented 9 years ago

Hey again.

The extension doesn't seem to be setting Access-Control-Expose-Headers for response headers, as such any custom response headers cannot be accessed. Chrome instead throws error messages, for example:

Refused to get unsafe header "Date"
Refused to get unsafe header "X-Some-Header"

Cheers

mhahmadi commented 9 years ago

I sent a pull request for this