updating security headers

Giveth · Dec 2, 2024 · e8d71d5 · e8d71d5
1 parent ec3fa78
commit e8d71d5
Showing 1 changed file with 12 additions and 0 deletions.
diff --git a/next.config.js b/next.config.js
@@ -162,6 +162,18 @@ const moduleExports = withBundleAnalyzer({
 						key: 'Content-Security-Policy',
 						value: "frame-ancestors 'self'",
 					},
+					{
+						key: 'X-Content-Type-Options',
+						value: 'nosniff', // Mitigates MIME type sniffing
+					},
+					{
+						key: 'Referrer-Policy',
+						value: 'strict-origin-when-cross-origin', // Protects user privacy
+					},
+					{
+						key: 'Permissions-Policy',
+						value: 'camera=(), microphone=(), geolocation=()', // Limits usage of browser features
+					},
 				],
 			},
 			{