diff --git a/lib/travis/api/app/middleware/cors.rb b/lib/travis/api/app/middleware/cors.rb
index eea34fda..dc98a4e4 100644
--- a/lib/travis/api/app/middleware/cors.rb
+++ b/lib/travis/api/app/middleware/cors.rb
@@ -14,7 +14,7 @@ class Travis::Api::App
       end
 
       options // do
-        headers['Access-Control-Allow-Methods'] = "GET, POST, PATCH, PUT, DELETE"
+        headers['Access-Control-Allow-Methods'] = "HEAD, GET, POST, PATCH, PUT, DELETE"
         headers['Access-Control-Allow-Headers'] = "Content-Type, Authorization, Accept"
       end
     end