Create HTTP response headers for Engagement Messenger

  • Release version: Australia
  • Updated March 12, 2026
  • 1 minute to read

    • Configure a name-value pair for HTTP response headers for the Engagement Messenger module. The ability to configure and pass response headers enables special handling of the page content by a client, which is most typically a browser.

    Before you begin

    About this task

    Use the Engagement Messenger API and your website URL to create a CORS rule.

    Procedure

    1. In the navigation pane, enter sys_response_header.list.
    2. Select New.
    3. On the form, fill in the fields.
      Table 1. HTTP Response Header form
      Field Description
      Active Option for indicating that this HTTP response header configuration is active.
      Application Application scope for this record.
      Applies to

      Type of record that the HTTP response header configuration applies to.

      Select Specific Type to indicate that this HTTP response header configuration is for the specific type and record that you select in the Type and Record fields.
      Type

      Type of record that the HTTP response header configuration applies to.

      Select Service Portal to indicate that the records are related to the Service Portal.
      Record

      Engagement Messenger module record that the HTTP response header configuration applies to.

      Select a record:
      1. Select the Search (Search icon.) icon to access the Select the document pop-up form.
      2. In the Table name field, ensure that the value is set to Service Portal.
      3. In the Document field, select the Search (Search icon.) icon.
      4. From the list of Service Portal records, select the messenger module that you configured.
      5. Select OK.
      Name

      Name for the name-value pair for the HTTP response header.

      Set this field value to Content-Security-Policy.
      Value

      Value for the name-value pair for the HTTP response header.

      Set this field value to frame-ancestors 'self' <enter your website URL>.

      For example, frame-ancestors 'self' https://www.example.com.
      Description Detailed description for the HTTP response header.

    What to do next

    Activate an Engagement Messenger module

    .