erettsegi-browser/next.config.mjs
2024-05-21 23:27:19 +02:00

50 lines
890 B
JavaScript

const securityHeaders = [
{
key: 'X-DNS-Prefetch-Control',
value: 'on',
},
{
key: 'X-XSS-Protection',
value: '1; mode=block',
},
{
key: 'X-Content-Type-Options',
value: 'nosniff',
},
{
key: 'Referrer-Policy',
value: 'strict-origin',
},
{
key: 'Content-Security-Policy',
value: `frame-ancestors 'self';`,
},
{
key: 'X-Frame-Options',
value: 'SAMEORIGIN',
},
{
key: 'Strict-Transport-Security',
value: 'max-age=31536000; includeSubDomains; preload',
},
{
key: 'Permissions-Policy',
value: 'camera=(), microphone=(), geolocation=()',
},
]
/** @type {import('next').NextConfig} */
const nextConfig = {
async headers() {
return [
{
source: '/:path*',
headers: securityHeaders,
},
]
},
reactStrictMode: true,
swcMinify: true,
}
export default nextConfig