CORS - expose `X-` headers

[vas3a]

When doing a CORS request and trying to access the X- headers (Eg. X-Total) from the response, I'm getting blocked by the CORS policies.

Can we have the X- headers exposed for easy access? eg. using Access-Control-Expose-Headers.

This is mostly useful in instances where we only need just the headers (HEAD requests) and not the actual body.

Thanks!