Access-control-allow-origin headers not being set

I have a cloudfront distribution thats serving a json file, this set the headers needed:
access-control-allow-origin: *

but as soon as i point a Cloudflare dns record to it and it caches, the file errors as the
access-control-allow-origin header is not there, why is floudflare not setting this header when it should be getting it from the cloudfront file

setup dns point to cloudfront distribution

headers there:

going through Cloudflare, header not there anymore:

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.