Due to Cors restriction, any header are visible per default on a reponse from S3.
Need to update S3 CORS configuration to let `content-disposition`/`content-length` accessible.
See https://docs.aws.amazon.com/AmazonS3/latest/dev/cors.html
ExposeHeader nodes