<!--IssueSummary start--> <details> <summary> Everyone can contribute. [Help move this issue forward](https://handbook.gitlab.com/handbook/marketing/developer-relations/contributor-success/community-contributors-workflows/#contributor-links) while earning points, leveling up and collecting rewards. </summary> - [Close this issue](https://contributors.gitlab.com/manage-issue?action=close&projectId=278964&issueIid=549503) </details> <!--IssueSummary end--> <!-- This template is a great use for issues that are feature::additions or technical tasks for larger issues.--> ### Proposal A customer is requesting we add Cross-Origin-* headers to `gitlab-static.net`. They are getting the following error in the web IDE when using a custom extension on open-vsx which has a dependency on the `WASI based WebAssembly Execution Engine` extension: ``` Error: WASM Server: Startup failed: ReferenceError: SharedArrayBuffer is not defined ``` When they append the following headers using a browser extension, the issue gets resolved: ``` Cross-Origin-Embedder-Policy: "require-corp" Cross-Origin-Resource-Policy: "cross-origin" Cross-Origin-Opener-Policy: "same-origin" ``` If we add these headers to `gitlab-static.net` they won't require the need for a browser extension to add the headers <!-- Use this section to explain the feature and how it will work. It can be helpful to add technical details, design proposals, and links to related epics or issues. --> <!-- Consider adding related issues and epics to this issue. You can also reference the Feature Proposal Template (https://gitlab.com/gitlab-org/gitlab/-/blob/master/.gitlab/issue_templates/Feature%20proposal%20-%20detailed.md) for additional details to consider adding to this issue. Additionally, as a data oriented organization, when your feature exits planning breakdown, consider adding the `What does success look like, and how can we measure that?` section. --> <!-- Label reminders Use the following resources to find the appropriate labels: - Use only one tier label choosing the lowest tier this is intended for - https://gitlab.com/gitlab-org/gitlab/-/labels - https://about.gitlab.com/handbook/product/categories/features/ -->