cors filter

hi there
I am using traccar 5.5. I want to set multiple domains to filter cors. I used the web.origin configuration but it doesn't work and I can access the apis from other domains. Did I forget something in the configuration?