diff --git a/config/application.rb b/config/application.rb
index 4514995ae..04e51d652 100644
--- a/config/application.rb
+++ b/config/application.rb
@@ -23,7 +23,7 @@ class Application < Rails::Application
     if ENV["CORS_HOST"].present?
       config.middleware.insert_before 0, Rack::Cors do
         allow do
-          origins ENV["CORS_HOST"] || "*"
+          origins(*(ENV["CORS_HOST"] || "*").split(","))
           resource "*",
             headers: :any,
             methods: %i[get options]