--- a/plugins/mod_http.lua	Mon Mar 28 14:40:21 2022 +0100
+++ b/plugins/mod_http.lua	Mon Mar 28 14:53:24 2022 +0100
@@ -163,7 +163,7 @@
 
 		local cors = cors_overrides[app_name] or event.item.cors;
 		if cors then
-			if cors.enabled ~= false then
+			if cors.enabled == true then
 				if cors.credentials ~= nil then
 					app_credentials = cors.credentials;
 				end