docs(nxdev): add security headers (nrwl#11240)

isaacplmann · Jul 21, 2022 · 68a2a11 · 68a2a11
1 parent b89e321
commit 68a2a11
Showing 1 changed file with 18 additions and 0 deletions.
diff --git a/nx-dev/nx-dev/next.config.js b/nx-dev/nx-dev/next.config.js
@@ -21,6 +21,24 @@ module.exports = withNx({
   env: {
     VERCEL: process.env.VERCEL,
   },
+  async headers() {
+    return [
+      {
+        source: '/:path*',
+        headers: [
+          { key: 'X-DNS-Prefetch-Control', value: 'on' },
+          {
+            key: 'Strict-Transport-Security',
+            value: 'max-age=63072000; includeSubDomains; preload',
+          },
+          { key: 'X-XSS-Protection', value: '1; mode=block' },
+          { key: 'X-Content-Type-Options', value: 'nosniff' },
+          { key: 'X-Frame-Options', value: 'DENY' },
+          { key: 'Referrer-Policy', value: 'no-referrer' },
+        ],
+      },
+    ];
+  },
   async redirects() {
     const rules = [];