Merge pull request #339 from significa/add-security-headers

Add security headers
significa · Feb 23, 2024 · aa80a60 · aa80a60
2 parents 76bdd39 + 0197983
commit aa80a60
Showing 1 changed file with 27 additions and 0 deletions.
diff --git a/vercel.json b/vercel.json
@@ -2,6 +2,33 @@
   "installCommand": "npm ci --prefer-offline --no-audit --no-fund",
   "buildCommand": "npm run build",
   "framework": "sveltekit",
+  "headers": [
+    {
+      "source": "/:path*",
+      "headers": [
+        {
+          "key": "X-Frame-Options",
+          "value": "DENY"
+        },
+        {
+          "key": "X-Content-Type-Options",
+          "value": "nosniff"
+        },
+        {
+          "key": "Referrer-Policy",
+          "value": "strict-origin-when-cross-origin"
+        },
+        {
+          "key": "Strict-Transport-Security",
+          "value": "max-age=63072000; includeSubDomains; preload"
+        },
+        {
+          "key": "Cross-Origin-Opener-Policy",
+          "value": "same-origin"
+        }
+      ]
+    }
+  ],
   "redirects": [
     {
       "source": "/showcase/:path",