diff --git a/readthedocs/settings/dev.py b/readthedocs/settings/dev.py
index 8c90ddcccf2..ee2f1c41452 100644
--- a/readthedocs/settings/dev.py
+++ b/readthedocs/settings/dev.py
@@ -44,7 +44,7 @@ def DATABASES(self):  # noqa
     # 127.0.0.1 test
     # and navigate to http://test:8000
     CORS_ORIGIN_WHITELIST = (
-        'test:8000',
+        'http://test:8000',
     )
 
     # Disable auto syncing elasticsearch documents in development
diff --git a/requirements/pip.txt b/requirements/pip.txt
index 0ca78d9b131..7ef7bbc6250 100644
--- a/requirements/pip.txt
+++ b/requirements/pip.txt
@@ -90,9 +90,7 @@ dj-pagination==2.5.0
 # Version comparison stuff
 packaging==21.3
 
-# django-cors-middleware==1.5.0 fails with
-# AttributeError: 'dict' object has no attribute 'has_header'
-django-cors-middleware==1.4.0  # pyup: ignore
+django-cors-headers==3.11.0
 
 # User agent parsing - used for analytics purposes
 user-agents==2.2.0