diff --git a/conf/icecast.xml.in b/conf/icecast.xml.in
index e451c453..67828d18 100644
--- a/conf/icecast.xml.in
+++ b/conf/icecast.xml.in
@@ -93,7 +93,7 @@
          If you don't want this, comment out the following line or read up on CORS.
     -->
     <http-headers>
-        <header name="Access-Control-Allow-Origin" value="*" />
+        <header type="cors" name="Access-Control-Allow-Origin" />
     </http-headers>
 
 
@@ -202,7 +202,7 @@
             <role type="anonymous" deny-all="*" />
         </authentication>
         <http-headers>
-                <header name="Access-Control-Allow-Origin" value="http://webplayer.example.org" />
+                <header type="cors" name="Access-Control-Allow-Origin" value="http://webplayer.example.org" />
                 <header name="baz" value="quux" />
         </http-headers>
 
diff --git a/conf/icecast_minimal.xml.in b/conf/icecast_minimal.xml.in
index ab229e9f..8926e95a 100644
--- a/conf/icecast_minimal.xml.in
+++ b/conf/icecast_minimal.xml.in
@@ -34,6 +34,6 @@
         <loglevel>information</loglevel> <!-- "debug", "information", "warning", or "error" -->
     </logging>
     <http-headers>
-        <header name="Access-Control-Allow-Origin" value="*" />
+        <header type="cors" name="Access-Control-Allow-Origin" />
     </http-headers>
 </icecast>
diff --git a/conf/icecast_shoutcast_compat.xml.in b/conf/icecast_shoutcast_compat.xml.in
index dcd7535b..8244b590 100644
--- a/conf/icecast_shoutcast_compat.xml.in
+++ b/conf/icecast_shoutcast_compat.xml.in
@@ -47,6 +47,6 @@
         <chroot>false</chroot>
     </security>
     <http-headers>
-        <header name="Access-Control-Allow-Origin" value="*" />
+        <header type="cors" name="Access-Control-Allow-Origin" />
     </http-headers>
 </icecast>