diff --git a/lib/policy_service_web/endpoint.ex b/lib/policy_service_web/endpoint.ex
index 027d793..f9ca4a1 100644
--- a/lib/policy_service_web/endpoint.ex
+++ b/lib/policy_service_web/endpoint.ex
@@ -25,7 +25,8 @@ defmodule PolicyServiceWeb.Endpoint do
     from: :policy_service,
     gzip: not code_reloading?,
     only: PolicyServiceWeb.static_paths(),
-    raise_on_missing_only: code_reloading?
+    raise_on_missing_only: code_reloading?,
+    headers: %{"Access-Control-Allow-Origin" => "*"}
 
   # Code reloading can be explicitly enabled under the
   # :code_reloader configuration of your endpoint.
@@ -42,7 +43,6 @@ defmodule PolicyServiceWeb.Endpoint do
     pass: ["*/*"],
     json_decoder: Phoenix.json_library()
 
-  plug CORSPlug
   plug Plug.MethodOverride
   plug Plug.Head
   plug Plug.Session, @session_options