From 436f2d679f6db8357252ede967287cc28814cb11 Mon Sep 17 00:00:00 2001 From: Nariman Jelveh Date: Thu, 14 Aug 2025 12:04:47 -0700 Subject: [PATCH] Update WebServerService.js --- src/backend/src/modules/web/WebServerService.js | 4 ---- 1 file changed, 4 deletions(-) diff --git a/src/backend/src/modules/web/WebServerService.js b/src/backend/src/modules/web/WebServerService.js index 2997fca34..dbb4a3c51 100644 --- a/src/backend/src/modules/web/WebServerService.js +++ b/src/backend/src/modules/web/WebServerService.js @@ -647,10 +647,6 @@ class WebServerService extends BaseService { } res.setHeader('Cross-Origin-Resource-Policy', 'cross-origin'); - // allow popups to be opened from any origin - res.setHeader('Cross-Origin-Opener-Policy', 'unsafe-none'); - res.setHeader('Cross-Origin-Embedder-Policy', 'unsafe-none'); - // Pass to next layer of middleware // disable iframes on the main domain