diff --git a/web/Gemfile b/web/Gemfile
index b66f25c80..d58012c38 100644
--- a/web/Gemfile
+++ b/web/Gemfile
@@ -157,6 +157,8 @@ gem 'elasticsearch'
 
 gem 'logging', '1.7.2'
 
+gem 'rack-cors', '~> 1.0', '>= 1.0.6'
+
 
 if ENV['FASTER_PATH'] == '1'
   # https://github.com/danielpclark/faster_path
diff --git a/web/Gemfile.alt b/web/Gemfile.alt
index e182929c7..79046da10 100644
--- a/web/Gemfile.alt
+++ b/web/Gemfile.alt
@@ -157,7 +157,7 @@ gem 'elasticsearch'
 
 gem 'logging', '1.7.2'
 
-gem 'rack-cors'
+gem 'rack-cors', '~> 1.0', '>= 1.0.6'
 
 
 if ENV['FASTER_PATH'] == '1'