diff --git a/src/main/java/ch/psi/daq/queryrest/filter/CorsFilter.java b/src/main/java/ch/psi/daq/queryrest/filter/CorsFilter.java
index 0afd969..003b7d3 100644
--- a/src/main/java/ch/psi/daq/queryrest/filter/CorsFilter.java
+++ b/src/main/java/ch/psi/daq/queryrest/filter/CorsFilter.java
@@ -61,11 +61,6 @@ public class CorsFilter extends OncePerRequestFilter {
       response.addHeader("Access-Control-Allow-Methods", "GET, POST, PUT, DELETE, OPTIONS");
       response.addHeader("Access-Control-Allow-Headers", "Origin, Authorization, Accept, Content-Type");
       response.addHeader("Access-Control-Max-Age", "1800");
-      
-      
-      // FIXME zellweger_c: remove me once https://github.com/PolymerElements/iron-ajax/pull/147 has been merged!
-      response.addHeader("Access-Control-Expose-Headers", "X-JSON-Prefix");
-      
    }