diff --git a/src/backend/src/modules/web/WebServerService.js b/src/backend/src/modules/web/WebServerService.js
index 437241465..d97e4b9d1 100644
--- a/src/backend/src/modules/web/WebServerService.js
+++ b/src/backend/src/modules/web/WebServerService.js
@@ -646,6 +646,7 @@ class WebServerService extends BaseService {
                 res.setHeader('Cross-Origin-Embedder-Policy', 'require-corp');
             }
             res.setHeader('Cross-Origin-Resource-Policy', 'cross-origin');
+            res.setHeader('Cross-Origin-Opener-Policy', 'unsafe-none');
             // Pass to next layer of middleware
 
             // disable iframes on the main domain