Add headers

sgcarstrends · Nov 2, 2023 · 419370d · 419370d
1 parent e7f3a5c
commit 419370d
Showing 1 changed file with 13 additions and 0 deletions.
diff --git a/middleware.ts b/middleware.ts
@@ -18,6 +18,19 @@ export const middleware = (request: NextRequest) => {
 
   const requestHeaders = new Headers(request.headers);
   requestHeaders.set("x-nonce", nonce);
+  requestHeaders.set("X-DNS-Prefetch-Control", "on");
+  requestHeaders.set(
+    "Strict-Transport-Security",
+    "max-age=63072000; includeSubDomains; preload",
+  );
+  requestHeaders.set("X-Frame-Options", "SAMEORIGIN");
+  requestHeaders.set(
+    "Permissions-Policy",
+    "camera=(), microphone=(), geolocation=(), browsing-topics=()",
+  );
+  requestHeaders.set("X-Content-Type-Options", "nosniff");
+  requestHeaders.set("Referrer-Policy", "origin-when-cross-origin");
+
   requestHeaders.set(
     "Content-Security-Policy",
     cspHeader.replace(/\s{2,}/g, " ").trim(),