Webpage card does not work because origin differs from HA domain

Configuration Frontend
1

I already tried to set

http:                                                                 
  cors_allowed_origins: http://grafana.lan:3333                        
  use_x_frame_options: false

but that does not seem to be sufficient. Any hints?