diff --git a/openstax/settings/base.py b/openstax/settings/base.py
index 7beef741e..330271115 100644
--- a/openstax/settings/base.py
+++ b/openstax/settings/base.py
@@ -104,7 +104,6 @@
 SECRET_KEY = 'wq21wtjo3@d_qfjvd-#td!%7gfy2updj2z+nev^k$iy%=m4_tr'
 
 MIDDLEWARE = [
-    'corsheaders.middleware.CorsMiddleware',
     'whitenoise.middleware.WhiteNoiseMiddleware',
     'openstax.middleware.CommonMiddlewareAppendSlashWithoutRedirect',
     'django.middleware.common.CommonMiddleware',
@@ -116,14 +115,6 @@
     'wagtail.contrib.redirects.middleware.RedirectMiddleware',
 ]
 
-CORS_ALLOWED_ORIGINS = [
-    "http://localhost:3000"
-]
-
-CORS_ALLOWED_ORIGIN_REGEXES = [
-    r"^https://\w+\.openstax\.org",
-]
-
 AUTHENTICATION_BACKENDS = (
     'oxauth.backend.OpenStax',
     'django.contrib.auth.backends.ModelBackend',
@@ -189,7 +180,6 @@
     'django.contrib.sitemaps',
     # contrib
     'compressor',
-    'corsheaders',
     'taggit',
     'modelcluster',
     'rest_framework',
diff --git a/requirements/base.txt b/requirements/base.txt
index 6659c61e2..55585170b 100644
--- a/requirements/base.txt
+++ b/requirements/base.txt
@@ -14,7 +14,6 @@ django-admin-view-permission==1.5
 django-appconf==1.0.3
 django-cachalot==1.5.0
 django-compressor==2.4
-django-cors-headers==3.7.0
 django-extensions==2.0.7
 django-filter==2.4.0
 django-inline-actions==2.3.0
@@ -98,6 +97,7 @@ django-admin-rangefilter==0.6.3
 
 # sso stuff
 pycryptodome>=3.9.7
+django-cors-headers==2.4.1
 
 # reporting
 sentry-sdk==1.1.0