# How do I edit the response headers? **URL:** \ **Category:** CMS Development\ **Tags:** local-development\ **Created:** [June 8, 2023, 8:23pm UTC](https://community.hubspot.com/t/how-do-i-edit-the-response-headers/82988 "2023-06-08T20:23:16Z")\ **Posts on this page:** 8\ **Page:** 1
**Author:** ![icheshire](https://avatars.discourse-cdn.com/v4/letter/i/bb73d2/32.png) [@icheshire](https://community.hubspot.com/u/icheshire)\ **Post date:** [June 8, 2023, 8:23pm UTC](https://community.hubspot.com/t/how-do-i-edit-the-response-headers/82988/1 "2023-06-08T20:23:16Z")
I want to use [https://partytown.builder.io/atomics,](https://partytown.builder.io/atomics,)which requires these headers: ```auto Cross-Origin-Embedder-Policy: credentialless Cross-Origin-Opener-Policy: same-origin ``` How do I edit the CMS site to use these headers? ---
**Author:** ![Jaycee\_Lewis](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/jaycee_lewis/32/61352_2.png) [@Jaycee\_Lewis](https://community.hubspot.com/u/Jaycee_Lewis)\ **Post date:** [June 9, 2023, 6:55pm UTC](https://community.hubspot.com/t/how-do-i-edit-the-response-headers/82988/2 "2023-06-09T18:55:10Z")
Hi, @icheshire 👋 Thanks for reaching out! The available security header options available to CMS Hub subscribers are listed here — [Additional domain security settings (CMS Hub only)](https://knowledge.hubspot.com/domains-and-urls/ssl-and-domain-security-in-hubspot#additional-domain-security-settings-cms-hub-only). In your case, neither Embedder-Policy nor Opener-Policy are on this list. I know this isn’t the answer you are wanting, and I hope it helps you get moving forward. Best, Jaycee ---
**Author:** ![icheshire](https://avatars.discourse-cdn.com/v4/letter/i/bb73d2/32.png) [@icheshire](https://community.hubspot.com/u/icheshire)\ **Post date:** [June 9, 2023, 8:32pm UTC](https://community.hubspot.com/t/how-do-i-edit-the-response-headers/82988/3 "2023-06-09T20:32:12Z")
Ok. Is there a way to request it? ---
**Author:** ![timmfin](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/timmfin/32/18774_2.png) [@timmfin](https://community.hubspot.com/u/timmfin)\ **Post date:** [June 22, 2023, 6:05pm UTC](https://community.hubspot.com/t/how-do-i-edit-the-response-headers/82988/4 "2023-06-22T18:05:23Z")
If you upload the necessary partytown JS lib files via Design Manager (or the hs cli) then you will be able to serve those “raw asset” files directly from your HubSpot domain (which should prevent the need to have those headers because the partytown JS will be on the same domain as your website). For example… ![timmfin_0-1687456986741.png](https://d2qpr2jzcazej7.cloudfront.net/original/3X/c/4/c4eae4ce3bbabc62f7b5f73ebd9d036ccb1b703f.png) And after those are in place I can access them from https:// **\** /hubfs/ **\** /raw\_assets/public/@generated/partytown/v0\_8\_0/partytown-atomics.min.js ---
**Author:** ![timmfin](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/timmfin/32/18774_2.png) [@timmfin](https://community.hubspot.com/u/timmfin)\ **Post date:** [June 22, 2023, 6:07pm UTC](https://community.hubspot.com/t/how-do-i-edit-the-response-headers/82988/5 "2023-06-22T18:07:43Z")
Ah, nevermind. I was thinking about regular CORs and `Access-Control-Allow-Origin` but `Cross-Origin-Embedder-Policy` is different (and yes we currently have no way to add that header). ---
**Author:** ![NBrown67](https://avatars.discourse-cdn.com/v4/letter/n/f05b48/32.png) [@NBrown67](https://community.hubspot.com/u/NBrown67)\ **Post date:** [May 13, 2024, 8:33pm UTC](https://community.hubspot.com/t/how-do-i-edit-the-response-headers/82988/6 "2024-05-13T20:33:38Z")
Almost. You forgot to setup a Proxy URL to these files… Easy regex config possible. Exercise left to readers. But, yes HubSpot is missing a \*ton\* of options that \*significantly\* impeded modern web development to the point it’s almost moot. Partytown, 103 hints, etc, etc critical to performance ---
**Author:** ![Jaycee\_Lewis](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/jaycee_lewis/32/61352_2.png) [@Jaycee\_Lewis](https://community.hubspot.com/u/Jaycee_Lewis)\ **Post date:** [June 22, 2023, 8:17pm UTC](https://community.hubspot.com/t/how-do-i-edit-the-response-headers/82988/7 "2023-06-22T20:17:12Z")
Hey, @icheshire 😊 It depends. Can you request it be unlocked or added to a specific portal? That is not an option as an add-on or additional service. If you are asking in a big picture way, can it be requested? Then yes, you can. By adding your suggestion to the [Ideas Community](https://community.hubspot.com/t5/HubSpot-Ideas/idb-p/HubSpot_Ideas). If you add a link back to your Idea post, I’ll give it an upvote to help get the ball rolling. Best, Jaycee ---
**Author:** ![icheshire](https://avatars.discourse-cdn.com/v4/letter/i/bb73d2/32.png) [@icheshire](https://community.hubspot.com/u/icheshire)\ **Post date:** [June 26, 2023, 4:19pm UTC](https://community.hubspot.com/t/how-do-i-edit-the-response-headers/82988/8 "2023-06-26T16:19:08Z")
Made a request: [https://community.hubspot.com/t5/HubSpot-Ideas/Allow-](https://community.hubspot.com/t5/HubSpot-Ideas/Allow-) response-headers-to-be-customized/idi-p/812072#M147265