---
sourceDocument: Australia Customer Service Management
sourceDocumentLink: https://www.servicenow.com/docs/r/australia/customer-service-management

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia Customer Service Management

ft:clusterId :

    - csm

bundleId :

    - csm

workflow :

    - Customer and Industry


---

# Create HTTP response headers

# Create HTTP response headers for Engagement Messenger {#ariaid-title1}

Release version: Australia  
Updated September 10, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
Configure a name-value pair for HTTP response headers for the Engagement Messenger module.

## Before you begin

* [Configure Engagement Messenger](https://www.servicenow.com/docs/2UkrfHFMej1W50rlUXLxpA "Create a Engagement Messenger module and configure its behavior, appearance, and styling. By creating a messenger module, you can customize the appearance and behavior according to your organizational branding and to suit your customer needs.").
* [Create an identity provider (IdP) for Engagement Messenger](https://www.servicenow.com/docs/DV2gltG4L_pW1kEn3uYA8g "Create an IdP for your Engagement Messenger so that you can enable customer authentication. You can create an IdP for either the OpenID Connect (OIDC) or Security Assertion Markup Language (SAML) authentication type.").
* [Configure a CORS rule for Engagement Messenger](https://www.servicenow.com/docs/tcU1okUJgtZMAN66h1vCEA "Configure a cross-origin resource sharing (CORS) rule to enable cross-domain requests between Engagement Messenger and your website where you want to deploy the messenger.").
* Role required: admin
{#create-http-response-headers-for-ec__ul_bf3_y2f_g4b}

## About this task

HTTP response headers control how a browser handles page content served by the Engagement Messenger module. Configure a name-value pair to set the Content-Security-Policy header, which restricts the domains that can embed the module in a frame.

## Procedure

1. In the navigation pane, enter <kbd class="ph userinput">sys_response_header.list</kbd>.
2. Select New.
3. On the form, fill in the fields.  
   {#create-http-response-headers-for-ec__table_vyw_3js_f4b__entry__2}

   | Field | Description |
   |-|-|
   | Active | Option for indicating that this HTTP response header configuration is active. |
   | Application | Application scope for this record. |
   | Applies to | Type of record that the HTTP response header configuration applies to. Select Specific Type to indicate that this HTTP response header configuration is for the specific type and record that you select in the Type and Record fields. |
   | Type | Type of record that the HTTP response header configuration applies to. Select Service Portal to indicate that the records are related to the Service Portal. |
   | Record | Engagement Messenger module record that the HTTP response header configuration applies to. Select a record: 1. Select the Search (![Search icon.]()) icon to access the Select the document pop-up form. 2. In the Table name field, ensure that the value is set to Service Portal. 3. In the Document field, select the Search (![Search icon.]()) icon. 4. From the list of Service Portal records, select the messenger module that you configured. 5. Select OK. {#create-http-response-headers-for-ec__ol_jxz_mx3_wnb} |
   | Name | Name for the name-value pair for the HTTP response header. Set this field value to Content-Security-Policy. |
   | Value | Value for the name-value pair for the HTTP response header. Set this field value to frame-ancestors 'self' \<enter your website URL\>. For example, frame-ancestors 'self' https://www.example.com. |
   | Description | Detailed description for the HTTP response header. |
   [Table 1. HTTP Response Header form]

   {#create-http-response-headers-for-ec__table_vyw_3js_f4b}

## What to do next

[Activate an Engagement Messenger module](https://www.servicenow.com/docs/wl0Dw01OWs2eQyDFItDncw "Activate the Engagement Messenger module that you configured so that you can embed it in your website.")
**Related topics**   

* [HTTP Response Headers](https://www.servicenow.com/docs/access?context=http-response-header&version=australia&pubname=australia-servicenow-platform&ft:locale=en-US)