From 6a155728af56b9ae6c00b07fe29087f58c6fcc27 Mon Sep 17 00:00:00 2001
From: Matthew Jackson <matthew@pq.io>
Date: Fri, 13 Mar 2026 18:07:21 -0700
Subject: [PATCH] Expose X-Removed-Metadata header for browser fetch access

---
 server.js | 1 +
 1 file changed, 1 insertion(+)

diff --git a/server.js b/server.js
index 65729d4..2c3d449 100644
--- a/server.js
+++ b/server.js
@@ -539,6 +539,7 @@ app.post("/strip", async (req, res) => {
       res.setHeader("Content-Type", "image/jpeg");
       try {
         res.setHeader("X-Removed-Metadata", JSON.stringify(removed));
+        res.setHeader("Access-Control-Expose-Headers", "X-Removed-Metadata");
       } catch {}
       return res.send(jpeg);
     } catch (e) {