in next.config.js [40:64]
async headers() {
return [
{
source: "/:path*",
headers: [
// {
// key: "Content-Security-Policy",
// value: isDev
// ? cspHeaderDev.replace(/\n/g, "")
// : cspHeaderProd.replace(/\n/g, ""),
// },
{
key: "X-Frame-Options",
value: "DENY",
},
{
key: "Content-Security-Policy-Report-Only",
value:
cspHeaderProd.replace(/\n/g, "") +
"report-uri /csp-violation-report-endpoint/",
},
],
},
];
},