diff --git a/lib/pliny/middleware/cors.rb b/lib/pliny/middleware/cors.rb
index 82f78f36..445e857b 100644
--- a/lib/pliny/middleware/cors.rb
+++ b/lib/pliny/middleware/cors.rb
@@ -4,7 +4,7 @@ class CORS
     ALLOW_METHODS  =
       %w( GET POST PUT PATCH DELETE OPTIONS ).freeze
     ALLOW_HEADERS  =
-      %w( Content-Type Accept Authorization Cache-Control If-None-Match If-Modified-Since ).freeze
+      %w( Content-Type Accept Authorization Cache-Control If-None-Match If-Modified-Since Origin).freeze
     EXPOSE_HEADERS =
       %w( Cache-Control Content-Language Content-Type Expires Last-Modified Pragma ).freeze