diff --git a/apps/vanilla-app/server.js b/apps/vanilla-app/server.js
index adc32c56d8..fb4286840d 100644
--- a/apps/vanilla-app/server.js
+++ b/apps/vanilla-app/server.js
@@ -6,9 +6,16 @@ const PORT = 8080;
 const ROOT = path.join(__dirname, "public");
 
 app.use((_, res, next) => {
-  res.setHeader("Cross-Origin-Opener-Policy", "same-origin");
-  res.setHeader("Cross-Origin-Embedder-Policy", "require-corp");
-  res.setHeader("Cross-Origin-Resource-Policy", "cross-origin");
+  res.set({
+    "Cross-Origin-Opener-Policy": "same-origin",
+    "Cross-Origin-Embedder-Policy": "require-corp",
+    "Cross-Origin-Resource-Policy": "cross-origin",
+    "Origin-Agent-Cluster": "?1",
+    "Access-Control-Allow-Origin": "*",
+    "Access-Control-Allow-Methods": "GET, POST, OPTIONS",
+    "Access-Control-Allow-Headers":
+      "Origin, X-Requested-With, Content-Type, Accept, Range",
+  });
   next();
 });