Add Security Headers (#1200)

2025-07-25 13:58:22 +08:00 · 2020-04-04 02:36:12 +03:00
parent 31f76d59a2
commit 00c5823a5e
2 changed files with 29 additions and 1 deletions
--- a/now.json
+++ b/now.json
@ -1,4 +1,31 @@
 {
+  "headers": [
+    {
+      "source": "/(.*)",
+      "headers": [
+        {
+          "key": "Access-Control-Allow-Origin",
+          "value": "*"
+        },
+        {
+          "key": "X-Content-Type-Options",
+          "value": "nosniff"
+        },
+        {
+          "key": "Feature-Policy",
+          "value": "*"
+        },
+        {
+          "key": "Referrer-Policy",
+          "value": "origin"
+        },
+        {
+          "key": "Content-Security-Policy",
+          "value": "default-src https: data: 'unsafe-inline'; connect-src https://*.excalidraw.com wss://excalidraw-socket.herokuapp.com https://excalidraw-socket.herokuapp.com"
+        }
+      ]
+    }
+  ],
  "redirects": [
    {
      "source": "/([^.]+)",