[deleted]
m4v3rick The allow from directive is enough. Don't modify the other as it's not necessary. My point here is that if Instagram delivers the CORS headers then you can't change them. However, as it works for my iPhone, I'd certainly try this out.