NewCrossOriginResourceSharingFilter should contain a "Access-Control-Expose-Headers" for "Location" --------------------------------------------------------------------------------------------------- Key: FORGE-2676 URL: https://issues.jboss.org/browse/FORGE-2676 Project: Forge Issue Type: Feature Request Components: Java EE Affects Versions: 3.3.0.Final Reporter: Sebastien Blanc Assignee: George Gastaldi Fix For: 3.3.1.Final NewCrossOriginResourceSharingFilter should contain a "Access-Control-Expose-Headers" for "Location" by default or it should be possible to add it when calling the CORS command. This is how I worked around it in the NewCrossOriginResourceSharingFilter.java filer : {code:java} response.getHeaders() .putSingle("Access-Control-Expose-Headers", "Location"); {code}