#NEWLINE# def test_expose_headers( self ) : #NEWLINE# #INDENT# 'CORS Specification Section 6.1.4\n\n        If the list of exposed headers is not empty add one or more\n        Access-Control-Expose-Headers headers, with as values the header field\n        names given in the list of exposed headers.\n        ' #NEWLINE# for method in self . methods : #NEWLINE# #INDENT# request = webob . Request . blank ( '/' ) #NEWLINE# request . method = response #NEWLINE# request . headers [ 'Origin' ] = 'http://headers.example.com' #NEWLINE# response = request . get_response ( self . application ) #NEWLINE# self . assertCORSResponse ( response , status = '200 OK' , allow_origin = 'http://headers.example.com' , max_age = None , allow_methods = None , allow_headers = None , allow_credentials = None , expose_headers = 'X-Header-1,X-Header-2' , has_content_type = True )