diff --git a/htlm/nginx.conf b/htlm/nginx.conf
index 25307af..8fa6bbd 100644
--- a/htlm/nginx.conf
+++ b/htlm/nginx.conf
@@ -37,5 +37,8 @@ server {
     location ~* \.(png|jpg|jpeg|gif|ico|wasm|js|css)$ {
         expires 1y;
         add_header Cache-Control "public, immutable";
+        # CORS headers must be repeated here because add_header in location block overrides parent
+        add_header Cross-Origin-Embedder-Policy "require-corp" always;
+        add_header Cross-Origin-Opener-Policy "same-origin" always;
     }
 }