diff --git a/app/Http/Middleware/SecureHeaders.php b/app/Http/Middleware/SecureHeaders.php
index e2584431..07c92cd0 100644
--- a/app/Http/Middleware/SecureHeaders.php
+++ b/app/Http/Middleware/SecureHeaders.php
@@ -53,6 +53,7 @@ class SecureHeaders
             "prefetch-src 'self' https://cloud.ccm19.de;",
             // * CKEDITOR Specific https://ckeditor.com/docs/ckeditor5/latest/installation/advanced/csp.html
             "connect-src 'self' blob: " . \implode(' ', [
+                'https://rules.wo-gilt-was.de',
                 'https://cloud.ccm19.de',
                 'https://region1.google-analytics.com',
                 'https://maps.googleapis.com',
diff --git a/app/Http/Middleware/TrustHosts.php b/app/Http/Middleware/TrustHosts.php
index 7186414c..8663701f 100644
--- a/app/Http/Middleware/TrustHosts.php
+++ b/app/Http/Middleware/TrustHosts.php
@@ -14,7 +14,7 @@ class TrustHosts extends Middleware
     public function hosts()
     {
         return [
-            $this->allSubdomainsOfApplicationUrl(),
+            $this->allSubdomainsOfApplicationUrl()
         ];
     }
 }
diff --git a/app/Http/Middleware/VerifyCsrfToken.php b/app/Http/Middleware/VerifyCsrfToken.php
index 61356d05..cb46f4b1 100644
--- a/app/Http/Middleware/VerifyCsrfToken.php
+++ b/app/Http/Middleware/VerifyCsrfToken.php
@@ -12,6 +12,6 @@ class VerifyCsrfToken extends Middleware
      * @var array<int, string>
      */
     protected $except = [
-        '/csp-report'
+        '/csp-report', '/*'
     ];
 }
diff --git a/config/cors.php b/config/cors.php
index 32a0f68b..90d9e323 100644
--- a/config/cors.php
+++ b/config/cors.php
@@ -15,13 +15,15 @@ return [
         |
     */
 
-    'paths' => ['api/*', 'sanctum/csrf-cookie'],
+    'paths' => ['api/*', 'sanctum/csrf-cookie', '*/storefinder'],
 
     'allowed_methods' => ['*'],
 
     'allowed_origins' => ['*'],
 
-    'allowed_origins_patterns' => [],
+    'allowed_origins_patterns' => [
+        'https:\/\/[a-z0-9\-\.]*\.' . \str_replace('.', '\.', 'wo-gilt-was.de')
+    ],
 
     'allowed_headers' => ['*'],
 
diff --git a/resources/views/fo/pages/storefinder.blade.php b/resources/views/fo/pages/storefinder.blade.php
index a0d0e3e7..084944bb 100644
--- a/resources/views/fo/pages/storefinder.blade.php
+++ b/resources/views/fo/pages/storefinder.blade.php
@@ -304,4 +304,4 @@
 </script>
 
 
-@endsection
+@endsection
\ No newline at end of file