feat: add security headers

ruisaraiva19 · Dec 12, 2021 · e56b36c · e56b36c
1 parent 612fe2e
commit e56b36c
Showing 1 changed file with 25 additions and 0 deletions.
diff --git a/next.config.js b/next.config.js
@@ -4,4 +4,29 @@ module.exports = {
 		deviceSizes: [375, 750, 1125],
 		imageSizes: [56, 112, 185, 370, 370, 375, 540, 740, 750, 1080],
 	},
+	headers() {
+		return [
+			{
+				source: '/(.*)',
+				headers: [
+					{
+						key: 'X-XSS-Protection',
+						value: '1; mode=block',
+					},
+					{
+						key: 'X-Frame-Options',
+						value: 'SAMEORIGIN',
+					},
+					{
+						key: 'X-Content-Type-Options',
+						value: 'nosniff',
+					},
+					{
+						key: 'Content-Security-Policy',
+						value: `default-src 'self'; frame-ancestors 'self'`,
+					},
+				],
+			},
+		]
+	},
 }