# Access-Control-Expose-Headers

**URL:** <https://community.dreamfactory.com/t/access-control-expose-headers/3298>\
**Category:** App Configuration\
**Created:** [October 6, 2016, 9:44am UTC](https://community.dreamfactory.com/t/access-control-expose-headers/3298 "2016-10-06T09:44:26Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![shreyasamrutkar](https://avatars.discourse-cdn.com/v4/letter/s/b9e5f3/32.png) [@shreyasamrutkar](https://community.dreamfactory.com/u/shreyasamrutkar)\
**Post date:** [October 6, 2016, 9:44am UTC](https://community.dreamfactory.com/t/access-control-expose-headers/3298/1 "2016-10-06T09:44:26Z")

</div>

I get following error when accessing Content-Disposition header in response

`Refused to get unsafe header "Content-Disposition"`

How to set Expose Headers property in CORS?

---

<div class="post-metadata">

**Author:** ![DFCommunityManager](https://yyz1.discourse-cdn.com/flex035/user_avatar/community.dreamfactory.com/dfcommunitymanager/32/887_2.png) [@DFCommunityManager](https://community.dreamfactory.com/u/DFCommunityManager)\
**Post date:** [October 7, 2016, 8:37pm UTC](https://community.dreamfactory.com/t/access-control-expose-headers/3298/2 "2016-10-07T20:37:21Z")

</div>

Hello @shreyasamrutkar, have you checked out our wiki?

- [https://wiki.dreamfactory.com/DreamFactory/Tutorials/Enabling\_CORS\_access](https://wiki.dreamfactory.com/DreamFactory/Tutorials/Enabling_CORS_access)
- [https://wiki.dreamfactory.com/DreamFactory/Features/CORS](https://wiki.dreamfactory.com/DreamFactory/Features/CORS)
- [https://wiki.dreamfactory.com/DreamFactory/Troubleshooting](https://wiki.dreamfactory.com/DreamFactory/Troubleshooting)

Thanks,  
@AlexBowen