Can't register Android device due to CORS header missing

[ringeling]

I'm running Lineage 16 and as of recently, I can't (re)add the device anymore. Not sure when this stopped working, but currently pushsafer is broken for me...
In logcat I see this error:

SystemWebChromeClient
file:///android_asset/www/index.html: Line 0 : Access to XMLHttpRequest at from origin 'file://' has been blocked by CORS policy: No 'Access-Control-Allow-Origin' header is present on the requested resource.

I checked the headers which are sent, and indeed, it's is not present.

Did you change your server config recently or did Lineage's internal web browser's security settings change? Either way, a fix would be appreciated.

[admin]

Hi,

i don some changes. Can you try again and give feedback.

Thanks Kevin