Header unset Content-Security-Policy Header unset X-Content-Security-Policy Header unset X-Frame-Options Header set Access-Control-Allow-Origin "*" Header set Cross-Origin-Opener-Policy "unsafe-none" Header set Cross-Origin-Embedder-Policy "unsafe-none" index