--- a/mod_http_upload/mod_http_upload.lua	Sun Nov 18 12:06:13 2018 +0000
+++ b/mod_http_upload/mod_http_upload.lua	Sun Nov 18 12:15:02 2018 +0000
@@ -231,6 +231,8 @@
 
 -- http service
 local function upload_data(event, path)
+	set_cross_domain_headers(event.response);
+
 	local uploader = pending_slots[path];
 	if not uploader then
 		module:log("warn", "Attempt to upload to unknown slot %q", path);