From d1a8d3634cfd281ea38d66bc35cd507464b24757 Mon Sep 17 00:00:00 2001
From: Ray Lee <rhlee@berkeley.edu>
Date: Mon, 19 Nov 2018 19:06:37 -0800
Subject: [PATCH] DRYD-543: Add content-disposition to exposed headers in CORS
 responses.

---
 .../src/main/webapp/WEB-INF/applicationContext-security.xml      | 1 +
 1 file changed, 1 insertion(+)

diff --git a/services/JaxRsServiceProvider/src/main/webapp/WEB-INF/applicationContext-security.xml b/services/JaxRsServiceProvider/src/main/webapp/WEB-INF/applicationContext-security.xml
index 04621a94d..bab5d159a 100644
--- a/services/JaxRsServiceProvider/src/main/webapp/WEB-INF/applicationContext-security.xml
+++ b/services/JaxRsServiceProvider/src/main/webapp/WEB-INF/applicationContext-security.xml
@@ -199,6 +199,7 @@
                         <property name="exposedHeaders">
                             <list>
                                 <value>Location</value>
+                                <value>Content-Disposition</value>
                             </list>
                         </property>
                         <property name="maxAge" value="86400" />
-- 
2.47.3