added security headers via _headers file (#202)

X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Cross-Origin-Opener-Policy: same-origin Co-authored-by: Guras <[email protected]>
greymass · Jul 25, 2024 · a2b4d1e · a2b4d1e
1 parent 523e479
commit a2b4d1e
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/public/_headers b/public/_headers
@@ -0,0 +1,8 @@
+# Apply these headers to all pages
+/*
+  X-Frame-Options: SAMEORIGIN
+  X-XSS-Protection: 1; mode=block
+  X-Content-Type-Options: nosniff
+  Referrer-Policy: strict-origin-when-cross-origin
+  Strict-Transport-Security: max-age=31536000; includeSubDomains
+  Cross-Origin-Opener-Policy: same-origin