--- a/pyramid_cubicweb/__init__.py	Wed Jan 21 15:14:11 2015 +0100
+++ b/pyramid_cubicweb/__init__.py	Wed Jan 21 17:28:30 2015 +0100
@@ -87,8 +87,8 @@
     app = wsgicors.CORS(
         app,
         origin=' '.join(cwconfig['access-control-allow-origin']),
-        headers=cwconfig['access-control-allow-headers'],
-        methods=cwconfig['access-control-allow-methods'],
+        headers=', '.join(cwconfig['access-control-allow-headers']),
+        methods=', '.join(cwconfig['access-control-allow-methods']),
         credentials='true')
 
     if profile: