diff --git a/internal/db/models/http_header_policy_dao.go b/internal/db/models/http_header_policy_dao.go
index 8b2b6c19..6716eee8 100644
--- a/internal/db/models/http_header_policy_dao.go
+++ b/internal/db/models/http_header_policy_dao.go
@@ -222,7 +222,7 @@ func (this *HTTPHeaderPolicyDAO) ComposeHeaderPolicyConfig(tx *dbs.Tx, headerPol
 
 	// CORS
 	if IsNotNull(policy.Cors) {
-		var corsConfig = &shared.HTTPCORSHeaderConfig{}
+		var corsConfig = shared.NewHTTPCORSHeaderConfig()
 		err = json.Unmarshal(policy.Cors, corsConfig)
 		if err != nil {
 			return nil, err
diff --git a/internal/rpc/services/service_http_header_policy.go b/internal/rpc/services/service_http_header_policy.go
index 7bb4c5e5..8895b1de 100644
--- a/internal/rpc/services/service_http_header_policy.go
+++ b/internal/rpc/services/service_http_header_policy.go
@@ -202,7 +202,7 @@ func (this *HTTPHeaderPolicyService) UpdateHTTPHeaderPolicyCORS(ctx context.Cont
 		}
 	}
 
-	var corsConfig = &shared.HTTPCORSHeaderConfig{}
+	var corsConfig = shared.NewHTTPCORSHeaderConfig()
 	err = json.Unmarshal(req.CorsJSON, corsConfig)
 	if err != nil {
 		return nil, err