added sts, xframe and xcontenttype headers (#1950)

2023-11-18 21:30:29 +00:00 · 2023-11-18 21:30:29 +00:00 · 7f6bb09000
parent 41b65b5761
commit 7f6bb09000
1 changed files with 21 additions and 0 deletions
--- a/next.config.js
+++ b/next.config.js
@ -98,4 +98,25 @@ module.exports = {
      },
    ],
  },
+  async headers() {
+    return [
+      {
+        source: '/(.*?)',
+        headers: [
+          {
+            key: 'Strict-Transport-Security',
+            value: 'max-age=31536000; includeSubDomains;',
+          },
+          {
+            key: 'X-Frame-Options',
+            value: 'SAMEORIGIN',
+          },
+          {
+            key: 'X-Content-Type-Options',
+            value: 'nosniff',
+          },
+        ],
+      },
+    ];
+  },
 };