diff --git a/openvidu-server/src/main/java/io/openvidu/server/config/SecurityConfig.java b/openvidu-server/src/main/java/io/openvidu/server/config/SecurityConfig.java
index bc3d427c3..251821c4d 100644
--- a/openvidu-server/src/main/java/io/openvidu/server/config/SecurityConfig.java
+++ b/openvidu-server/src/main/java/io/openvidu/server/config/SecurityConfig.java
@@ -65,7 +65,7 @@ public class SecurityConfig {
 	 * Configure CORS and CSRF settings. Can be overridden by subclasses.
 	 */
 	protected void configureHttpSecurity(HttpSecurity http) throws Exception {
-		http.cors(cors -> cors.disable())
+		http.cors(cors -> {})  // Uses below CorsFilter bean
 			.csrf(csrf -> csrf.disable());
 	}