diff --git a/app.go b/app.go
index bfdbcc13229f87506ed6daefacdeaa6fe1bc7232..345e2646d2f2309b29cb2037062f15b272682f33 100644
--- a/app.go
+++ b/app.go
@@ -17,10 +17,14 @@ func serve(sig chan os.Signal, db *leveldb.DB) error {
 	app := fiber.New()
 
 	// cors
-	app.Use(cors.New(cors.Config{
-		AllowOrigins: []string{conf[allowedURL]},
-		AllowHeaders: []string{"Origin", "Content-Type", "Accept"},
-	}))
+	if conf[allowedURL] != "unset" {
+		app.Use(cors.New(cors.Config{
+			AllowOrigins: []string{conf[allowedURL]},
+			AllowHeaders: []string{"Origin", "Content-Type", "Accept"},
+		}))
+	} else {
+		log.Println("CORS disabled")
+	}
 
 	var captcha fiber.Handler
 	hCaptchaEnable := conf[hCaptchaSiteKey] != "unset" && conf[hCaptchaSecretKey] != "unset"