diff --git a/cof/settings/common.py b/cof/settings/common.py
index a34d18ae..8ec003ad 100644
--- a/cof/settings/common.py
+++ b/cof/settings/common.py
@@ -104,9 +104,11 @@ INSTALLED_APPS = [
     'taggit',
     'kfet.auth',
     'kfet.cms',
+    'corsheaders',
 ]
 
 MIDDLEWARE = [
+    'corsheaders.middleware.CorsMiddleware',
     'django.contrib.sessions.middleware.SessionMiddleware',
     'django.middleware.common.CommonMiddleware',
     'django.middleware.csrf.CsrfViewMiddleware',
@@ -208,6 +210,13 @@ AUTHENTICATION_BACKENDS = (
 
 RECAPTCHA_USE_SSL = True
 
+CORS_ORIGIN_WHITELIST = (
+    'bda.ens.fr',
+    'www.bda.ens.fr'
+    'cof.ens.fr',
+    'www.cof.ens.fr',
+)
+
 # Cache settings
 
 CACHES = {
diff --git a/requirements.txt b/requirements.txt
index b30660ee..5ad482a5 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -24,6 +24,7 @@ channels==1.1.5
 python-dateutil
 wagtail==1.10.*
 wagtailmenus==2.2.*
+django-cors-headers==2.2.0
 
 # Production tools
 wheel