The Access-Control-Expose-Headers response header indicates which headers can be exposed as part of the response by listing their names
| Websites using header Access-Control-Expose-Headers | 140,009 |
| Percentage of websites that use Access-Control-Expose-Headers header | 0.23% |
| Total discovered header values | 3,426 |
| Header uses directives | Yes |
| Header values are unique or random | No |
| Most popular in the country |  United States |
| Directive | Share | Websites count | Unique Values |
|---|---|---|---|
| request-context | 26.53% | 37,145 | 1 |
| content-length | 17.07% | 23,895 | 1 |
| content-range | 11.08% | 15,509 | 1 |
| content-type | 7.38% | 10,332 | 1 |
| x-frontend | 5.21% | 7,299 | 1 |
| * | 4.37% | 6,121 | 1 |
| x-request-id | 4.22% | 5,914 | 1 |
| location | 3.74% | 5,237 | 1 |
| date | 3.00% | 4,195 | 1 |
| range | 2.48% | 3,470 | 1 |
| cache-control | 2.43% | 3,408 | 1 |
| x-requested-with | 2.31% | 3,233 | 1 |
| x-csrf-token | 2.06% | 2,879 | 1 |
| if-modified-since | 1.53% | 2,143 | 1 |
| user-agent | 1.37% | 1,920 | 1 |
| dnt | 1.33% | 1,859 | 1 |
| keep-alive | 1.33% | 1,857 | 1 |
| transfer-encoding | 1.19% | 1,664 | 1 |
| x-frame-options | 0.80% | 1,119 | 1 |
| x-customheader | 0.73% | 1,029 | 1 |
| api-version | 0.65% | 905 | 1 |
| x-cdn-diag | 0.40% | 559 | 1 |
| x-proxy-cache | 0.10% | 146 | 1 |
| Domain | Country | Rank | Contacts |
|---|---|---|---|
| United States | 42 | ||
| United States | 64 | ||
| United States | 65 | ||
 Russia | 74 | ||
| United States | 77 | ||
| United States | 96 |
| Header value | Value prevalence |
|---|---|
| Request-Context | 26% |
| X-Log, X-Reqid | 7% |
| Content-Length,Content-Range | 6% |
| X-Frontend | 5% |
| * | 4% |
| AMP-Access-Control-Allow-Source-Origin | 3% |
| Content-Length | 3% |
| x-request-id | 2% |
| WWW-Authenticate,Server-Authorization | 1% |
| X-Csrf-Token | 1% |
| Location, X-Request-Id | 1% |
| Content-Disposition | 1% |
| X-WP-Total, X-WP-TotalPages, Link | 1% |
| Content-Type | 1% |
| x-amzn-waf-action | 0% |
| Authorization | 0% |
| Content-Security-Policy, Location | 0% |
| x-ms-request-id,Content-Length,Date,Transfer-Encoding | 0% |
| x-country-code,x-region | 0% |
| API-Version,X-FRAME-OPTIONS,Content-Security-Policy | 0% |