Status: Idea Submitted
For developers
I’m using partytown.js, and using Atomics for significantly better performance requires setting response headers `Cross-Origin-Embedder-Policy` and `Cross-Origin-Opener-Policy`, so I need hubspot to allow customizing any response header. It’s my website on my domain, so I think I should be able to!
We have the issue, when referencing to WebAssembly demos. Would need to setting Cross-Origin-Embedder-Policy and Cross-Origin-Opener-Policy, but this is not supported by Hubspot. There’s a list of security headers we can edit, but these are not included.
Hi, adding to this, we’re still not able to use the Hubspot tracking code and/or chat widget for our product and company effectively, because Hubspot has no support or solution for sites with COEP/COOP enabled. This feature has been adopted by more and more sites and tools; the inability to track, and to load Hubspot chat on the site, and the lack of any response on solutions, is a dealbreaker for my employer and other million/billion dollar companies we work with.
HubSpot has functionality that adds preload hints to response headers when a <link rel=“preload”> is used in HTML <head>. In addition to letting us customize the response headers, they should update that automated function to add the crossorigin attribute if the preload hint is a font. When preloading fonts the crossorigin attribute needs to be added, even when the font is local.