Access-Control-Expose-Headers
is a header request that allows a server to show which response headers are available to scripts running in the browser.
However, only the CORS-safelisted response headers are shown.
Access-Control-Expose-Headers: [<header-name>[, <header-name>]*]
Access-Control-Expose-Headers: *