fixing cors again

2 files changed, 4 insertions, 4 deletions

diff --git a/external/newsapi.php b/external/newsapi.php
index 067334008..1121f3400 100644
--- a/external/newsapi.php
+++ b/external/newsapi.php
@@ -79,8 +79,8 @@ class NewsAPI extends Controller {
 	 */
 	public function cors() {
 		// needed for webapps access due to cross origin request policy
-		if(isset($this->request->server['Origin'])) {
-			$origin = $this->request->server['Origin'];
+		if(isset($this->request->server['HTTP_ORIGIN'])) {
+			$origin = $this->request->server['HTTP_ORIGIN'];
 		} else {
 			$origin = '*';
 		}
diff --git a/middleware/corsmiddleware.php b/middleware/corsmiddleware.php
index 187696de6..4fec2faa1 100644
--- a/middleware/corsmiddleware.php
+++ b/middleware/corsmiddleware.php
@@ -53,10 +53,10 @@ class CORSMiddleware extends Middleware {
 		$annotationReader = new MethodAnnotationReader($controller, $methodName);
 
 		// only react if its an API request and if the request sends origin
-		if(isset($this->request->server['Origin']) &&
+		if(isset($this->request->server['HTTP_ORIGIN']) &&
 			$annotationReader->hasAnnotation('API')) {
 
-			$origin = $this->request->server['Origin'];
+			$origin = $this->request->server['HTTP_ORIGIN'];
 			$response->addHeader('Access-Control-Allow-Origin', $origin);
 			$response->addHeader('Access-Control-Allow-Credentials', 'true');