diff --git a/lms/envs/common.py b/lms/envs/common.py
index 04a1753838ed..2d31cba98218 100644
--- a/lms/envs/common.py
+++ b/lms/envs/common.py
@@ -3687,6 +3687,9 @@ def _make_locale_paths(settings):  # pylint: disable=missing-function-docstring
 # because that decision might happen in a later config file. (The headers to
 # allow is an application logic, and not site policy.)
 CORS_ALLOW_HEADERS = corsheaders_default_headers + (
+    'cache-control',
+    'expires',
+    'pragma',
     'use-jwt-cookie',
 )