diff --git a/src/Controller/DownloadController.php b/src/Controller/DownloadController.php
index d117a83..20ddcff 100644
--- a/src/Controller/DownloadController.php
+++ b/src/Controller/DownloadController.php
@@ -145,6 +145,9 @@ public function download(): Response
                 'Content-Type'
             ]),
         ];
+        if($this->request->headers->has('Origin')) {
+            $crossOriginHeaders['Access-Control-Allow-Origin'] = $this->request->headers->get('Origin');
+        }
 
         // Send empty response for OPTIONS requests
         if ($this->request->isMethod('OPTIONS')) {