diff --git a/index.js b/index.js
index bca6c32..4a8ef6c 100644
--- a/index.js
+++ b/index.js
@@ -65,7 +65,7 @@ const getFileType = (filename) => {
 const allowlist = ['https://files.hippoz.xyz', 'https://hippoz.xyz']
 const corsOptions = {
     origin: function (origin, callback) {
-        if (whitelist.indexOf(origin) !== -1) {
+        if (allowlist.indexOf(origin) !== -1) {
                 callback(null, true)
         } else {
             callback(new Error('Not allowed by CORS'))