d.</p>
<p>Edit the CORS plugin by adding a new entry <code>*</code> in the <code>Expose headers</code> input, and save your route. Try calling your route again using the button.</p>
<p>@@@ div { .centered-img } <img src="../imgs/cors/expose_headers.png" /></p></div>
<p>You should now be able to see the headers sent back by Otoroshi. Let&rsquo;s reduce the scope of allowed origins by restricting access to the route to your own domain only.</p>
<p>Edit the CORS plugin by replacing the <code>*</code> entry of 