diff --git a/src/main/java/de/thm/arsnova/web/CorsFilter.java b/src/main/java/de/thm/arsnova/web/CorsFilter.java
index 1390fb45561c986565b822b463f6268c7c90896f..c660011d63a767993c2e53d4ecc02dc5e554c7b1 100644
--- a/src/main/java/de/thm/arsnova/web/CorsFilter.java
+++ b/src/main/java/de/thm/arsnova/web/CorsFilter.java
@@ -33,8 +33,8 @@ public class CorsFilter extends org.springframework.web.filter.CorsFilter {
 	}
 
 	private static UrlBasedCorsConfigurationSource configurationSource(List<String> origins) {
+		UrlBasedCorsConfigurationSource source = new UrlBasedCorsConfigurationSource();
 		CorsConfiguration config;
-		UrlBasedCorsConfigurationSource source;
 
 		/* Grant full access from specified origins */
 		config = new CorsConfiguration();
@@ -47,7 +47,6 @@ public class CorsFilter extends org.springframework.web.filter.CorsFilter {
 		config.addAllowedMethod("PUT");
 		config.addAllowedMethod("DELETE");
 		config.setAllowCredentials(true);
-		source = new UrlBasedCorsConfigurationSource();
 		source.registerCorsConfiguration("/**", config);
 
 		/* Grant limited access from all origins */
@@ -57,7 +56,6 @@ public class CorsFilter extends org.springframework.web.filter.CorsFilter {
 		config.addAllowedHeader("X-Requested-With");
 		config.addAllowedMethod("GET");
 		config.setAllowCredentials(true);
-		source = new UrlBasedCorsConfigurationSource();
 		source.registerCorsConfiguration("/", config);
 		source.registerCorsConfiguration("/arsnova-config", config);
 		source.registerCorsConfiguration("/configuration/", config);