async headers()

in next.config.js [40:64]


  async headers() {
    return [
      {
        source: "/:path*",
        headers: [
          // {
          //   key: "Content-Security-Policy",
          //   value: isDev
          //     ? cspHeaderDev.replace(/\n/g, "")
          //     : cspHeaderProd.replace(/\n/g, ""),
          // },
          {
            key: "X-Frame-Options",
            value: "DENY",
          },
          {
            key: "Content-Security-Policy-Report-Only",
            value:
              cspHeaderProd.replace(/\n/g, "") +
              "report-uri /csp-violation-report-endpoint/",
          },
        ],
      },
    ];
  },