diff --git a/lms/envs/common.py b/lms/envs/common.py index 04a1753838..2d31cba982 100644 --- a/lms/envs/common.py +++ b/lms/envs/common.py @@ -3687,6 +3687,9 @@ if FEATURES.get('ENABLE_CORS_HEADERS'): # because that decision might happen in a later config file. (The headers to # allow is an application logic, and not site policy.) CORS_ALLOW_HEADERS = corsheaders_default_headers + ( + 'cache-control', + 'expires', + 'pragma', 'use-jwt-cookie', )