diff --git a/src/network/rest/RequestDispatcher.h b/src/network/rest/RequestDispatcher.h
index e007910e..787de7c5 100644
--- a/src/network/rest/RequestDispatcher.h
+++ b/src/network/rest/RequestDispatcher.h
@@ -156,6 +156,17 @@ namespace network
                             }
 
                             //what = matcher.first;
+
+                            // ensure CORS headers are added
+                            
+                            reply.headers.add("Access-Control-Allow-Origin", "*");
+                            reply.headers.add("Access-Control-Allow-Methods", "*");
+                            reply.headers.add("Access-Control-Allow-Headers", "*");
+                            
+                            if (request.method == HTTP_OPTIONS) {
+                                reply.status = http::HTTPPayload::OK;
+                            }
+                            
                             matcher.second->handleRequest(request, reply, what);
                             return;
                         }