From my Java controller, I have set the following;

@CrossOrigin(exposedHeaders = {HttpHeaders.CONTENT_DISPOSITION})

However in the browser, when I check the actual request, under Response Headers, I do not see “Content-Disposition” value for “Access-Control-Expose-Headers” attribute.

Is there something more which needs to be done to expose this header and be able to read via JS ?