server: remove duplicate Access-Control-Allow-Origin header

1 files changed, 2 insertions, 2 deletions

diff --git a/lib/server.js b/lib/server.js
index 03eef94..3dd996c 100644
--- a/lib/server.js
+++ b/lib/server.js
@@ -19,11 +19,11 @@ module.exports = function Server (client, port) {
     // by responding to the OPTIONS preflight request with the specified
     // origin and requested headers.
     if (req.method === 'OPTIONS' && req.headers['access-control-request-headers']) {
-      res.setHeader('Access-Control-Allow-Origin', req.headers.origin)
       res.setHeader('Access-Control-Allow-Methods', 'POST, GET, OPTIONS')
       res.setHeader(
           'Access-Control-Allow-Headers',
-          req.headers['access-control-request-headers'])
+          req.headers['access-control-request-headers']
+      )
       res.setHeader('Access-Control-Max-Age', '1728000')
       return res.end()
     }