more security headers

cdfb064e · tom · b6380f6f · cdfb064e
Commit cdfb064e authored Mar 02, 2023 by tom
Hide whitespace changes
Inline Side-by-side

Showing with 12 additions and 0 deletions

headers.js configs/nextjs/headers.js +12 -0

No files found.
--- a/configs/nextjs/headers.js
+++ b/configs/nextjs/headers.js
@@ -12,6 +12,18 @@ async function headers() {
          key: 'X-Content-Type-Options',
          value: 'nosniff',
        },
+        {
+          key: 'X-XSS-Protection',
+          value: '1; mode=block',
+        },
+        {
+          key: 'X-DNS-Prefetch-Control',
+          value: 'on',
+        },
+        {
+          key: 'Cross-Origin-Opener-Policy',
+          value: 'same-origin',
+        },
      ],
    },
  ];