Refused to get unsafe header "Content-Disposition

Refused to get unsafe header "Content-Disposition"

XMLHttpRequest/ajax/ axios中獲不到取header辦法。

//獲取heade方法

//XMLHttpRequest
XMLHttpRequest.getResponseHeader("Content-Disposition");
XMLHttpRequest.getAllResponseHeaders();
//ajax ???
response.headers("Content-Disposition")

解決辦法：

//nodejs-expressjs為例
 res.writeHead(200, {
      "Access-Control-Allow-Origin": '*',
      'Content-Type': 'application/octet-stream;charset=UTF-8',
      "Access-Control-Expose-Headers":'Content-Disposition',//如果不暴露header，那就Refused to get unsafe header "Content-Disposition"
      "Content-Disposition":  'attachment;filename='+ filename,
    });//設置響應頭


//java ???
context.Response.Headers.Add("Access-Control-Expose-Headers", "Content-Disposition");

參考文獻：

angularjs 文件下載 並 從response header中獲取文件名

如何解決跨域中的Refused to get unsafe header "date"

從XMLHttpRequest請求響應里getResponseHeader(header)報錯：Refused to get unsafe header "**" 問題解決

Refused to get unsafe header “Content-Range”