# OWASP Header errors prevent content from loading correctly

**URL:** <https://devforum.zoom.us/t/owasp-header-errors-prevent-content-from-loading-correctly/91011>\
**Category:** App Submission\
**Created:** [June 28, 2023, 7:13am UTC](https://devforum.zoom.us/t/owasp-header-errors-prevent-content-from-loading-correctly/91011 "2023-06-28T07:13:31Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![ritz7](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/ritz7/32/46650_2.png) [@ritz7](https://devforum.zoom.us/u/ritz7)\
**Post date:** [June 28, 2023, 7:13am UTC](https://devforum.zoom.us/t/owasp-header-errors-prevent-content-from-loading-correctly/91011/1 "2023-06-28T07:13:31Z")

</div>

I am trying to submit zoom app in marketplace. When the app was submitted I got a response from the Zoom team which is “OWASP Header errors prevent content from loading correctly.” and the below screenshot.

 ![Screenshot 2023-06-16 at 12.59.56 PM](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/3X/5/b/5bae4eca88a460416ea425625bd8da4c5ed87746.jpeg)

I tested the header and was able to see the ‘OWASP-Header’ in header response with 200 status code but after a while when we retest it the header was missing and status code was 304. Can someone please guide us understand what needs to be done? The home page is built on Framer-“[https://www.framer.com/](https://www.framer.com/)” while the actual app is built on Bubble “[https://bubble.io/](https://bubble.io/)”.

---

<div class="post-metadata">

**Author:** ![elisa.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/elisa.zoom/32/47836_2.png) [@elisa.zoom](https://devforum.zoom.us/u/elisa.zoom)\
**Post date:** [June 28, 2023, 7:26pm UTC](https://devforum.zoom.us/t/owasp-header-errors-prevent-content-from-loading-correctly/91011/2 "2023-06-28T19:26:17Z")

</div>

Hi @ritz7  
Thanks for reaching out to us!  
Have you taken a look into our Docs here:

> **[OWASP Headers](https://developers.zoom.us/docs/zoom-apps/security/owasp/)**
>
> The Zoom Developer Platform is an open platform that allows third-party developers to build applications and integrations upon Zoom’s video-first unified communications platform.

> **[OWASP Secure Headers Project | OWASP Foundation](https://owasp.org/www-project-secure-headers/)**
>
> OWASP Secure Headers Project on the main website for The OWASP Foundation. OWASP is a nonprofit foundation that works to improve the security of software.

Also, feel free to take a look at our sample app here:

> <https://github.com/zoom/zoomapps-advancedsample-react/blob/main/backend/server.js>

Might help you as a reference as an example of valid headers