vercel.json

{
    "headers": [
        {
            "source": "/(.*)",
            "headers": [
                {
                    "key": "X-Content-Type-Options",
                    "value": "nosniff"
                },
                {
                    "key": "X-Frame-Options",
                    "value": "SAMEORIGIN"
                },
                {
                    "key": "X-XSS-Protection",
                    "value": "1; mode=block"
                },
                {
                    "key": "Access-Control-Allow-Credentials",
                    "value": "false"
                },
                {
                    "key": "Access-Control-Allow-Origin",
                    "value": "*"
                },
                {
                    "key": "Access-Control-Allow-Methods",
                    "value": "GET,POST,OPTIONS"
                },
                {
                    "key": "Access-Control-Allow-Headers",
                    "value": "*"
                },
                {
                    "key": "Vary",
                    "value": "Accept-Encoding"
                },
                {
                    "key": "Content-Security-Policy",
                    "value": "frame-ancestors 'self' https://app.safe.global"
                }
            ]
        }
    ]
}