diff --git a/src/webserver.js b/src/webserver.js
index 72cfe2e1f1..3fd24b582b 100644
--- a/src/webserver.js
+++ b/src/webserver.js
@@ -194,7 +194,7 @@ function setupHelmet(app) {
 		referrerPolicy: { policy: 'strict-origin-when-cross-origin' },
 	};
 
-	if (meta.config['cross-origin-embedder-policy']) {
+	if (!meta.config['cross-origin-embedder-policy']) {
 		options.crossOriginEmbedderPolicy = false;
 	}