added security headers via _headers file

X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Cross-Origin-Opener-Policy: same-origin
greymass · Jul 24, 2024 · 1adbd5e · 1adbd5e
1 parent 7de02fb
commit 1adbd5e
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/public/_headers b/public/_headers
@@ -0,0 +1,8 @@
+# Apply these headers to all pages
+/*
+  X-Frame-Options: SAMEORIGIN
+  X-XSS-Protection: 1; mode=block
+  X-Content-Type-Options: nosniff
+  Referrer-Policy: strict-origin-when-cross-origin
+  Strict-Transport-Security: max-age=31536000; includeSubDomains
+  Cross-Origin-Opener-Policy: same-origin