Create HTTP response headers for Engagement Messenger

task brazil Updated Sep 10, 2026 2 min read create-http-response-headers-for-ec.md
Raw file servicenow.com

Configure a name-value pair for HTTP response headers for the Engagement Messenger module.

Before you begin

About this task

HTTP response headers control how a browser handles page content served by the Engagement Messenger module. Configure a name-value pair to set the Content-Security-Policy header, which restricts the domains that can embed the module in a frame.

Procedure

  1. In the navigation pane, enter sys_response_header.list.

  2. Select New.

  3. On the form, fill in the fields.

Field

Description

Active

Option for indicating that this HTTP response header configuration is active.

Application

Application scope for this record.

Applies to

Type of record that the HTTP response header configuration applies to.

Select Specific Type to indicate that this HTTP response header configuration is for the specific type and record that you select in the Type and Record fields.

Type

Type of record that the HTTP response header configuration applies to.

Select Service Portal to indicate that the records are related to the Service Portal.

Record

Engagement Messenger module record that the HTTP response header configuration applies to.

Select a record:

  1. Select the Search ([Omitted image "List_SearchIcon.png"] Alt text: Search icon.) icon to access the Select the document pop-up form.
  2. In the Table name field, ensure that the value is set to Service Portal.
  3. In the Document field, select the Search ([Omitted image "List_SearchIcon.png"] Alt text: Search icon.) icon.
  4. From the list of Service Portal records, select the messenger module that you configured.
  5. Select OK.

Name

Name for the name-value pair for the HTTP response header.

Set this field value to Content-Security-Policy.

Value

Value for the name-value pair for the HTTP response header.

Set this field value to frame-ancestors 'self' <enter your website URL>.

For example, frame-ancestors 'self' https://www.example.com.

Description

Detailed description for the HTTP response header.

## What to do next

Activate an Engagement Messenger module

Related topics

HTTP Response Headers

Search documentation
Search document titles and file paths on the brazil branch