
django-cors-headers now requires them to be specified since version 3.0.0 [1]. The change is backwards compatible and works with the previous releases of django-cors-headers. [1]: https://github.com/ottoyiu/django-cors-headers/blob/master/HISTORY.rst#300-2019-05-10 Change-Id: Ie7d6170fc2e3952c4770e88bf58060df6239fbd7