fix safe embed not working (#269)

* copy config from mondo to fix safe embed not working * woops
celo-org · Nov 25, 2024 · 19a7436 · 19a7436
1 parent 9c06477
commit 19a7436
Showing 1 changed file with 16 additions and 2 deletions.
diff --git a/next.config.js b/next.config.js
@@ -1,6 +1,12 @@
 /** @type {import('next').NextConfig} */
 const webpack = require('webpack');
 
+const FRAME_SRC_HOSTS = [
+  'https://*.walletconnect.com',
+  'https://*.walletconnect.org',
+  'https://app.safe.global',
+];
+
 const nextConfig = {
   reactStrictMode: false,
   swcMinify: false,
@@ -17,11 +23,19 @@ const nextConfig = {
   async headers() {
     return [
       {
-        source: '/:path*',
+        source: '/(.*)',
         headers: [
+          {
+            key: 'X-XSS-Protection',
+            value: '1; mode=block',
+          },
           {
             key: 'X-Frame-Options',
-            value: 'DENY',
+            value: `ALLOW-FROM ${FRAME_SRC_HOSTS.join(' ')}`,
+          },
+          {
+            key: 'X-Content-Type-Options',
+            value: 'nosniff',
           },
         ],
       },