diff --git a/config/initializers/storybook.rb b/config/initializers/storybook.rb
new file mode 100644
index 0000000000..3f521af868
--- /dev/null
+++ b/config/initializers/storybook.rb
@@ -0,0 +1,14 @@
+# Adjust headers to allow running Storybook in development.
+# Uses iframes and doesn't play nicely with CORS checks
+
+if Rails.env.development?
+  module PermissiveCORSHeaders
+    def self.before(response)
+      response.headers["Access-Control-Allow-Origin"] = "*"
+      response.headers["Access-Control-Allow-Methods"] = "GET"
+    end
+  end
+
+  ViewComponent::Storybook::StoriesController.before_action(PermissiveCORSHeaders)
+end
+