Create HTTP response headers for Engagement Messenger
Configure a name-value pair for HTTP response headers for the Engagement Messenger module.
Before you begin
- Configure Engagement Messenger.
- Create an identity provider (IdP) for Engagement Messenger.
- Configure a CORS rule for Engagement Messenger.
- Role required: admin
About this task
HTTP response headers control how a browser handles page content served by the Engagement Messenger module. Configure a name-value pair to set the Content-Security-Policy header, which restricts the domains that can embed the module in a frame.
Procedure
-
In the navigation pane, enter
sys_response_header.list. -
Select New.
-
On the form, fill in the fields.
|
Field |
Description |
|---|---|
|
Active |
Option for indicating that this HTTP response header configuration is active. |
|
Application |
Application scope for this record. |
|
Applies to |
Type of record that the HTTP response header configuration applies to. Select Specific Type to indicate that this HTTP response header configuration is for the specific type and record that you select in the Type and Record fields. |
|
Type |
Type of record that the HTTP response header configuration applies to. Select Service Portal to indicate that the records are related to the Service Portal. |
|
Record |
Engagement Messenger module record that the HTTP response header configuration applies to. Select a record:
|
|
Name |
Name for the name-value pair for the HTTP response header. Set this field value to Content-Security-Policy. |
|
Value |
Value for the name-value pair for the HTTP response header. Set this field value to frame-ancestors 'self' <enter your website URL>. For example, frame-ancestors 'self' https://www.example.com. |
|
Description |
Detailed description for the HTTP response header. |
Activate an Engagement Messenger module
Related topics
--- title: Create HTTP response headers for Engagement Messenger description: Configure a name-value pair for HTTP response headers for the Engagement Messenger module. locale: en-US canonical_url: https://www.servicenow.com/docs/r/australia/customer-service-management/customer-self-service-and-omnichannel-engagement/create-http-response-headers-for-ec.html release: australia product: Customer Self-service and Omnichannel Engagement classification: customer-self-service-and-omnichannel-engagement topic_type: task last_updated: "2026-09-10" reading_time_minutes: 2 breadcrumb: [Set up Engagement Messenger, Set up self-service, Configure, Customer Service Management] --- # Create HTTP response headers for Engagement Messenger Configure a name-value pair for HTTP response headers for the Engagement Messenger module. ## Before you begin - [Configure Engagement Messenger](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/customer-service-management/customer-self-service-and-omnichannel-engagement/create-engagement-messenger-module.md). - [Create an identity provider \(IdP\) for Engagement Messenger](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/customer-service-management/customer-self-service-and-omnichannel-engagement/create-identity-providers-for-engagement-messenger.md). - [Configure a CORS rule for Engagement Messenger](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/customer-service-management/customer-self-service-and-omnichannel-engagement/create-cors-for-rest-api-ec.md). - Role required: admin ## About this task HTTP response headers control how a browser handles page content served by the Engagement Messenger module. Configure a name-value pair to set the **Content-Security-Policy** header, which restricts the domains that can embed the module in a frame. ## Procedure 1. In the navigation pane, enter `sys_response_header.list`. 2. Select **New**. 3. On the form, fill in the fields. <table id="table_vyw_3js_f4b"><thead><tr><th> Field </th><th> Description </th></tr></thead><tbody><tr><td> Active </td><td> Option for indicating that this HTTP response header configuration is active. </td></tr><tr><td> Application </td><td> Application scope for this record. </td></tr><tr><td> Applies to </td><td> Type of record that the HTTP response header configuration applies to. Select **Specific Type** to indicate that this HTTP response header configuration is for the specific type and record that you select in the **Type** and **Record** fields. </td></tr><tr><td> Type </td><td> Type of record that the HTTP response header configuration applies to. Select **Service Portal** to indicate that the records are related to the Service Portal. </td></tr><tr><td> Record </td><td> Engagement Messenger module record that the HTTP response header configuration applies to. Select a record: 1. Select the Search \(\[Omitted image "List\_SearchIcon.png"\] Alt text: Search icon.\) icon to access the Select the document pop-up form. 2. In the **Table name** field, ensure that the value is set to **Service Portal**. 3. In the **Document** field, select the Search \(\[Omitted image "List\_SearchIcon.png"\] Alt text: Search icon.\) icon. 4. From the list of Service Portal records, select the messenger module that you configured. 5. Select **OK**. </td></tr><tr><td> Name </td><td> Name for the name-value pair for the HTTP response header. Set this field value to **Content-Security-Policy**. </td></tr><tr><td> Value </td><td> Value for the name-value pair for the HTTP response header. Set this field value to **frame-ancestors 'self' <enter your website URL>**. For example, **frame-ancestors 'self' https://www.example.com**. </td></tr><tr><td> Description </td><td> Detailed description for the HTTP response header. </td></tr></tbody> </table> ## What to do next [Activate an Engagement Messenger module](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/customer-service-management/customer-self-service-and-omnichannel-engagement/activate-engagement-messenger-module.md) **Related topics** [HTTP Response Headers](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/servicenow-platform/http-response-header.md)
| title | Create HTTP response headers for Engagement Messenger |
| description | Configure a name-value pair for HTTP response headers for the Engagement Messenger module. |
| locale | en-US |
| canonical_url | https://www.servicenow.com/docs/r/australia/customer-service-management/customer-self-service-and-omnichannel-engagement/create-http-response-headers-for-ec.html |
| release | australia |
| product | Customer Self-service and Omnichannel Engagement |
| classification | customer-self-service-and-omnichannel-engagement |
| topic_type | task |
| last_updated | 2026-09-10 |
| reading_time_minutes | 2 |
| breadcrumb | Set up Engagement MessengerSet up self-serviceConfigureCustomer Service Management |