vercel.json

{
    "headers": [
      {
        "source": "/(.*)",
        "headers" : [
          {
            "key" : "X-Content-Type-Options",
            "value" : "nosniff"
          },
          {
            "key" : "X-Frame-Options",
            "value" : "DENY"
          },
          {
            "key" : "X-XSS-Protection",
            "value" : "1; mode=block"
          },
          {
            "key" : "Referrer-Policy",
            "value" : "strict-origin"
          },
          {
            "key" : "Permissions-Policy",
            "value" : "geolocation=(self), microphone=(), camera=()"
          },
          {
            "key" : "Content-Security-Policy-Report-Only",
            "value" : "default-src 'self' api.across.to across.to wss://api.blocknative.com; font-src 'self' fonts.gstatic.com assets.vercel.com data:; img-src 'self' registry.walletconnect.org assets.vercel.com data:; connect-src wss://*.bridge.walletconnect.org wss://api.blocknative.com mainnet.infura.io dev.api.across.to api.across.to across.to across.matomo.cloud mainnet.boba.network *.wallet.coinbase.com *.alchemy.com *.infura.io api2.amplitude.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' platform.twitter.com vercel.live across.matomo.cloud; style-src 'self' 'unsafe-inline'; frame-src 'self' vercel.live platform.twitter.com; frame-ancestors 'self'; report-uri https://umaproject.uriports.com/reports/report; report-to default"
          },
          {
            "key" : "Report-To",
            "value" : "{\"group\":\"default\",\"max_age\":10886400,\"endpoints\":[{\"url\":\"https://umaproject.uriports.com/reports\"}],\"include_subdomains\":false}"
          },
          {
            "key" : "NEL",
            "value" : "{\"report_to\":\"default\",\"max_age\":2592000,\"include_subdomains\":true,\"failure_fraction\":0.5}"
          }
        ]
      }
    ]
  }