private void setAllowedCorsOrigins() {
        String corsOrigins = System.getProperty("allowed_cors_origins");
        if (corsOrigins != null) {
            allowedCorsOrigins = new HashSet<>(Arrays.asList(corsOrigins.trim().split(",")));
        }
    }
Read system property and set allowed CORS Headers
gateway/platforms/vertx3/vertx3/src/main/java/io/apiman/gateway/platforms/vertx3/verticles/ApimanVerticleBase.java