How to get all headers from Angular 2 answer?

Question

The response headers that I see in Chrome Dev tools do not match those that Angular 2 displays in the Chrome console.

After the command is executed, only the Content-Type header appears:

this.http.get(tempUrl).map(res=>{ console.log("csrf received"); console.log(res); }) 

Answer 1

Only a specific list of "safe" headers is provided by default (for Javascript). This is for security reasons. This list is as follows

• Cache control
• Content language
• content type
• Expires
• Last change
• Pragma

To set other headers, the server must send an Access-Control-Expose-Headers control header, listing all the headers that it wants to provide.

 Access-Control-Expose-Headers: Content-Length, X-CSRF-Token