Files
webshop/shop/next.config.ts
DanielS 08382ff4a1
All checks were successful
Staging Build / build (push) Successful in 2m37s
sec: Add form-action to CSP and remove duplicate HSTS header based on ZAP report
2026-06-25 17:20:27 +02:00

31 lines
887 B
TypeScript

import type { NextConfig } from "next";
const nextConfig: NextConfig = {
output: "standalone",
cacheComponents: false,
poweredByHeader: false,
async headers() {
return [
{
source: '/:path*',
headers: [
{
key: 'X-Frame-Options',
value: 'SAMEORIGIN',
},
{
key: 'X-Content-Type-Options',
value: 'nosniff',
},
{
key: 'Content-Security-Policy',
value: "default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' blob: data:; font-src 'self' data:; connect-src 'self' https://*.supabase.co wss://*.supabase.co https://*.supabase.net wss://*.supabase.net; frame-ancestors 'self'; form-action 'self';",
},
],
},
];
},
};
export default nextConfig;