The ’Access-Control-Allow-Origin’ header with Giant Apache!

SetEnvIf Origin ^(https?://(?:.+\.)?aonesalons\.com(?::\d{1,5})?)$   CORS_ALLOW_ORIGIN=$1
Header append Access-Control-Allow-Origin  %{CORS_ALLOW_ORIGIN}e   env=CORS_ALLOW_ORIGIN

The 'Access-Control-Allow-Origin' header contains multiple values '*, https://demo.aonesalons.com', but only one is allowed


Ref:
https://stackoverflow.com/questions/48766156/the-access-control-allow-origin-header-with-apache/49026668