在对文件执行范围请求（服务工作人员内部带有Fetch的javascript）时，如果API所返回的Content-Range标头不在公开的标头中，则我将无法访问：
请求
accept: */*
authorization: Bearer xxxx
Origin: http://localhost:3000
range: bytes=83718484-
Referer: http://localhost:3000/worker.js
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/67.0.3396.99 Safari/537.36
响应
access-control-allow-credentials: true
access-control-allow-origin: http://localhost:3000
access-control-expose-headers: Content-Disposition, Content-Length, Date, Server, Transfer-Encoding, Vary, X-GUploader-UploadID, X-Google-GFE-Backend-Request-Cost, X-Google-GFE-Load-Report, X-Google-Trace
alt-svc: quic=":443"; ma=xxxxxxxxx; v="xxxxxxxxx"
cache-control: private, max-age=0, must-revalidate
content-disposition: attachment
Content-Length: 12096
Content-Range: bytes 83718484-83730579/83730580
content-type: video/quicktime
我如何访问此标头？