Chrome瀏覽器javascript錯誤：拒絕獲得不安全的標題X-Response-Time with servicestack

Question

我在Chrome控制檯中出現此錯誤。

我加入了X-響應時間頭allowedHeaders到CorsFeatures

Plugins.Add(new CorsFeature(
"*", 
allowCredentials: true, 
allowedHeaders: "Content-Type, Allow, Authorization, X-Response-Time")); 

我所附加的標題來響應過，任何想法？

[AddHeader(name: "X-Response-Time",value: "")] 

Answer 1

我所附加的標題Access-Control-Expose-Headers和作品！

Access-Control-Allow-Credentials:true 
Access-Control-Allow-Headers:Content-Type, Allow, Authorization, X-Response-Time 
Access-Control-Allow-Methods:GET, POST, PUT, DELETE, PATCH, OPTIONS 
Access-Control-Allow-Origin:* 
Access-Control-Expose-Headers:Content-Type, Allow, Authorization, X-Response-Time