diff --git a/src/backend/src/modules/web/WebServerService.js b/src/backend/src/modules/web/WebServerService.js
index 2997fca34..dbb4a3c51 100644
--- a/src/backend/src/modules/web/WebServerService.js
+++ b/src/backend/src/modules/web/WebServerService.js
@@ -647,10 +647,6 @@ class WebServerService extends BaseService {
             }
             res.setHeader('Cross-Origin-Resource-Policy', 'cross-origin');
 
-            // allow popups to be opened from any origin
-            res.setHeader('Cross-Origin-Opener-Policy', 'unsafe-none');
-            res.setHeader('Cross-Origin-Embedder-Policy', 'unsafe-none');
-
             // Pass to next layer of middleware
 
             // disable iframes on the main domain