diff --git a/etc/nginx/snippets/cross-origin-security.conf b/etc/nginx/snippets/cross-origin-security.conf
index 0b2458b..8acc8db 100644
--- a/etc/nginx/snippets/cross-origin-security.conf
+++ b/etc/nginx/snippets/cross-origin-security.conf
@@ -2,10 +2,10 @@
 # Meant to be used globally, but some apps may need a manual overwrite, so this is split out from security.conf
 
 proxy_hide_header Cross-Origin-Resource-Policy;
-add_header Cross-Origin-Resource-Policy same-origin always;
+add_header Cross-Origin-Resource-Policy "same-origin" always;
 
 proxy_hide_header Cross-Origin-Opener-Policy;
-add_header Cross-Origin-Opener-Policy same-origin always;
+add_header Cross-Origin-Opener-Policy "same-origin" always;
 
 proxy_hide_header Cross-Origin-Embedder-Policy;
-add_header Cross-Origin-Embedder-Policy require-corp always;
\ No newline at end of file
+add_header Cross-Origin-Embedder-Policy "require-corp" always;
\ No newline at end of file