add cors headers to self-hosted-dashboard if env var is set (#35869)

GitOrigin-RevId: 22bfd4caa3b10dd47d0b8bd2e118232a67149671

Author: gautamg795

npm-packages/dashboard-self-hosted/next.config.js

@@ -37,14 +37,27 @@ const optionsForExport = {
     unoptimized: true,
   },
 };
+
 const optionsForBuild = {
   output: "standalone",
   async headers() {
     return [
       {
         // Apply these headers to all routes in your application.
         source: "/:path*",
-        headers: securityHeaders,
+        headers: process.env.EMBEDDED_CORS_HEADERS
+          ? [
+              ...securityHeaders,
+              {
+                key: "Cross-Origin-Resource-Policy",
+                value: "cross-origin",
+              },
+              {
+                key: "Cross-Origin-Embedder-Policy",
+                value: "require-corp",
+              },
+            ]
+          : securityHeaders,
       },
     ];
   },