From e225cb92f68f9f9ce6670d5e0cd80ef5f7d3b934 Mon Sep 17 00:00:00 2001
From: Nariman Jelveh <nj@puter.com>
Date: Thu, 14 Aug 2025 11:41:41 -0700
Subject: [PATCH] Update WebServerService.js

---
 src/backend/src/modules/web/WebServerService.js | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/backend/src/modules/web/WebServerService.js b/src/backend/src/modules/web/WebServerService.js
index 437241465..d97e4b9d1 100644
--- a/src/backend/src/modules/web/WebServerService.js
+++ b/src/backend/src/modules/web/WebServerService.js
@@ -646,6 +646,7 @@ class WebServerService extends BaseService {
                 res.setHeader('Cross-Origin-Embedder-Policy', 'require-corp');
             }
             res.setHeader('Cross-Origin-Resource-Policy', 'cross-origin');
+            res.setHeader('Cross-Origin-Opener-Policy', 'unsafe-none');
             // Pass to next layer of middleware
 
             // disable iframes on the main domain