diff --git a/testing/notification-test-core/src/main/java/org/opengroup/osdu/notification/util/BaseTestTemplate.java b/testing/notification-test-core/src/main/java/org/opengroup/osdu/notification/util/BaseTestTemplate.java
index d1467ae4310e1b76d0250bc1dc2769ae687b82ba..c8adce6a661f9edf8740e056a11e2fe5d72340a6 100644
--- a/testing/notification-test-core/src/main/java/org/opengroup/osdu/notification/util/BaseTestTemplate.java
+++ b/testing/notification-test-core/src/main/java/org/opengroup/osdu/notification/util/BaseTestTemplate.java
@@ -87,17 +87,17 @@ public abstract class BaseTestTemplate extends TestBase {
 			ClientResponse response = descriptor.run(getArg(), testUtils.getOpsToken());
 
 			assertEquals(error(response.getStatus() == 204 ? "" : response.getEntity(String.class)), expectedOkResponseCode(), response.getStatus());
-			assertEquals("[GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH]", response.getHeaders().getFirst("Access-Control-Allow-Methods"));
-			assertEquals("[origin, content-type, accept, authorization, data-partition-id, correlation-id, appkey]", response.getHeaders().getFirst("Access-Control-Allow-Headers"));
-			assertEquals("[*]", response.getHeaders().getFirst("Access-Control-Allow-Origin"));
-			assertEquals("[true]", response.getHeaders().getFirst("Access-Control-Allow-Credentials"));
+			assertEquals("GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH", response.getHeaders().getFirst("Access-Control-Allow-Methods"));
+			assertEquals("origin, content-type, accept, authorization, data-partition-id, correlation-id, appkey", response.getHeaders().getFirst("Access-Control-Allow-Headers"));
+			assertEquals("*", response.getHeaders().getFirst("Access-Control-Allow-Origin"));
+			assertEquals("true", response.getHeaders().getFirst("Access-Control-Allow-Credentials"));
 			assertEquals("DENY", response.getHeaders().getFirst("X-Frame-Options"));
 			assertEquals("1; mode=block", response.getHeaders().getFirst("X-XSS-Protection"));
 			assertEquals("nosniff", response.getHeaders().getFirst("X-Content-Type-Options"));
-			assertEquals("[no-cache, no-store, must-revalidate]", response.getHeaders().getFirst("Cache-Control"));
-			assertEquals("[default-src 'self']", response.getHeaders().getFirst("Content-Security-Policy"));
-			assertEquals("[max-age=31536000; includeSubDomains]", response.getHeaders().getFirst("Strict-Transport-Security"));
-			assertEquals("[0]", response.getHeaders().getFirst("Expires"));
+			assertEquals("no-cache, no-store, must-revalidate", response.getHeaders().getFirst("Cache-Control"));
+			assertEquals("default-src 'self'", response.getHeaders().getFirst("Content-Security-Policy"));
+			assertEquals("max-age=31536000; includeSubDomains", response.getHeaders().getFirst("Strict-Transport-Security"));
+			assertEquals("0", response.getHeaders().getFirst("Expires"));
 		} finally {
 			deleteResource();
 		}