diff --git a/app/templates/element/httpHeaders.php b/app/templates/element/httpHeaders.php
index 20f8b4a96..5309bb57d 100644
--- a/app/templates/element/httpHeaders.php
+++ b/app/templates/element/httpHeaders.php
@@ -74,7 +74,10 @@
   header("Permissions-Policy: $permissionsPolicy");
   header("X-Content-Type-Options: nosniff");
   header("Cross-Origin-Opener-Policy: same-origin");
-  header("Cross-Origin-Embedder-Policy: require-corp");
+  if (!Cake\Core\Configure::read('debug')) {
+    // This COEP will block the Debug Kit iframe, so skip it when in debug mode. 
+    header("Cross-Origin-Embedder-Policy: require-corp");
+  }
   header("X-Permitted-Cross-Domain-Policies: none");
   header("Referrer-Policy: strict-origin-when-cross-origin");