diff --git a/data_portal/settings/base.py b/data_portal/settings/base.py
index e46fc5ee..fc89eda8 100644
--- a/data_portal/settings/base.py
+++ b/data_portal/settings/base.py
@@ -145,6 +145,7 @@
 CORS_ALLOW_HEADERS = list(default_headers) + [
     'x-amz-security-token',
     'x-amz-date',
+    'Content-Disposition'
 ]
 
 XRAY_RECORDER = {