diff --git a/middleware/cors.js b/middleware/cors.js
index 6b94c23..7abb3c8 100644
--- a/middleware/cors.js
+++ b/middleware/cors.js
@@ -13,9 +13,13 @@ export function createCors() {
     if (opts.enabled) {
       let origin = req.headers['origin'] || req.headers['referer'] || ''
       let headers = req.headers['access-control-request-headers']
+
+      if (!origin) {
+        return next()
+      }
       let { hostname, host, protocol } = parse(origin)
 
-      if (opts.origin.length && hostname) {
+      if (opts.origin.length) {
         let pass = false
         for (let it of opts.origin) {
           if (hostname.endsWith(it)) {