diff --git a/lib/middleware/header.js b/lib/middleware/header.js
index 3a7a997a0b..2a48f05649 100644
--- a/lib/middleware/header.js
+++ b/lib/middleware/header.js
@@ -2,8 +2,8 @@ const logger = require('../utils/logger');
 const config = require('../config');
 const headers = {
     'Access-Control-Allow-Origin': '*',
-    'Access-Control-Allow-Headers': 'Content-Type, Content-Length, Authorization, Accept, X-Requested-With , yourHeaderFeild',
-    'Access-Control-Allow-Methods': 'PUT, POST, GET, DELETE, OPTIONS',
+    'Access-Control-Allow-Headers': 'Content-Type, Content-Length, Authorization, Accept, X-Requested-With',
+    'Access-Control-Allow-Methods': 'GET',
     'Content-Type': 'application/xml; charset=utf-8',
     'Cache-Control': `max-age=${config.cacheExpire / 2}`,
 };
diff --git a/test/middleware/header.js b/test/middleware/header.js
new file mode 100644
index 0000000000..de15c7bf1d
--- /dev/null
+++ b/test/middleware/header.js
@@ -0,0 +1,19 @@
+const supertest = require('supertest');
+const { server } = require('../../lib/index');
+const request = supertest(server);
+const config = require('../../lib/config');
+
+afterAll(() => {
+    server.close();
+});
+
+describe('header', () => {
+    it(`header`, async () => {
+        const response = await request.get('/test/1');
+        expect(response.headers['access-control-allow-origin']).toBe('*');
+        expect(response.headers['access-control-allow-headers']).toBe('Content-Type, Content-Length, Authorization, Accept, X-Requested-With');
+        expect(response.headers['access-control-allow-methods']).toBe('GET');
+        expect(response.headers['content-type']).toBe('application/xml; charset=utf-8');
+        expect(response.headers['cache-control']).toBe(`max-age=${config.cacheExpire / 2}`);
+    });
+});
diff --git a/test/middleware/template.js b/test/middleware/template.js
index b1fd73fc57..4d63c5f2bf 100644
--- a/test/middleware/template.js
+++ b/test/middleware/template.js
@@ -28,10 +28,6 @@ describe('template', () => {
         expect(parsed1.items[0].author).toEqual(expect.any(String));
         expect(parsed1.items[0].content).toEqual(expect.any(String));
         expect(parsed1.items[0].guid).toEqual(expect.any(String));
-
-        const response2 = await request.get('/test/1');
-        const parsed2 = await parser.parseString(response2.text);
-        expect(parsed2).toMatchObject(parsed1);
     });
 
     it(`.atom`, async () => {