Add X-Frame-Options to page headers (#6784)

Co-authored-by: Hariom Balhara <hariombalhara@gmail.com>
2023-02-01 05:58:47 +00:00 · 2023-02-01 05:58:47 +00:00 · c42674595c
parent 17eb45b0b6
commit c42674595c
1 changed files with 14 additions and 0 deletions
--- a/apps/web/next.config.js
+++ b/apps/web/next.config.js
@ -176,6 +176,20 @@ const nextConfig = {
      }, */
    ];
  },
+  async headers() {
+    return [
+      {
+        // prettier-ignore
+        source: "/:path*((?<!\/embed$)(?<!\/embed\/preview\.html$))",
+        headers: [
+          {
+            key: "X-Frame-Options",
+            value: "DENY",
+          },
+        ],
+      },
+    ];
+  },
  async redirects() {
    const redirects = [
      {