diff --git a/Cargo.lock b/Cargo.lock
index 749d6ade..5a0ac51d 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -21,9 +21,9 @@ dependencies = [
 
 [[package]]
 name = "actix-cors"
-version = "0.6.5"
+version = "0.7.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0346d8c1f762b41b458ed3145eea914966bb9ad20b9be0d6d463b20d45586370"
+checksum = "f9e772b3bcafe335042b5db010ab7c09013dad6eac4915c91d8d50902769f331"
 dependencies = [
  "actix-utils",
  "actix-web",
diff --git a/svanill-vault-server/Cargo.toml b/svanill-vault-server/Cargo.toml
index b8072e34..776029af 100644
--- a/svanill-vault-server/Cargo.toml
+++ b/svanill-vault-server/Cargo.toml
@@ -12,7 +12,7 @@ readme = "README.md"
 svanill-vault-openapi = { path = "../svanill-vault-openapi", version = "0.1" }
 actix-web = { version = "4.4.1", features = ["rustls"] }
 actix-http = "3.5.1"
-actix-cors = "0.6.5"
+actix-cors = "0.7.0"
 actix-web-httpauth = "0.8.1"
 env_logger = "0.10.2"
 structopt = "0.3.26"
diff --git a/svanill-vault-server/src/server.rs b/svanill-vault-server/src/server.rs
index 23271c88..1784fb63 100644
--- a/svanill-vault-server/src/server.rs
+++ b/svanill-vault-server/src/server.rs
@@ -39,6 +39,7 @@ pub fn run(listener: TcpListener, data: AppData) -> Result<Server, std::io::Erro
                 http::header::ACCEPT,
                 http::header::CONTENT_TYPE,
             ])
+            .block_on_origin_mismatch(true)
             .max_age(86400);
 
         cors_handler = if cors_origin == "*" {