Merge pull request giselles-ai#234 from toyamarinyon/prevent-clickjac…

…king security(headers): Add X-Frame-Options header to prevent clickjacking
toyamarinyon · Dec 16, 2024 · 886a8da · 886a8da
2 parents 52c5541 + 57580fd
commit 886a8da
Showing 1 changed file with 13 additions and 0 deletions.
diff --git a/next.config.ts b/next.config.ts
@@ -26,6 +26,19 @@ const nextConfig: NextConfig = {
 			},
 		];
 	},
+	async headers() {
+		return [
+			{
+				source: "/:path*",
+				headers: [
+					{
+						key: "X-Frame-Options",
+						value: "DENY",
+					},
+				],
+			},
+		];
+	},
 };
 
 export default withSentryConfig(nextConfig, {