diff --git a/server/conf/application.conf b/server/conf/application.conf
index f4ce5db..eb03550 100644
--- a/server/conf/application.conf
+++ b/server/conf/application.conf
@@ -13,8 +13,14 @@ play.http {
   secret.key=${?PLAY_APPLICATION_SECRET}
 }
 
+play.filters.enabled += "play.filters.cors.CORSFilter"
 play.filters.enabled += "com.xsn.explorer.play.LoggingFilter"
 
+play.filters.cors {
+  allowedOrigins = ["http://xsnexplorer.io", "http://localhost:4200"]
+  allowedHttpMethods = ["GET"]
+}
+
 rpc {
   host = "http://localhost:51473"
   username = "dummy"