Fix X-Frame-Option to prevent clickjacking (#559)

e2b-dev · Jan 29, 2025 · e8e4cab · e8e4cab
2 parents dde83b7 + b31dd7b
commit e8e4cab
Showing 1 changed file with 10 additions and 0 deletions.
diff --git a/apps/web/next.config.mjs b/apps/web/next.config.mjs
@@ -48,6 +48,16 @@ const codeSnippetsDir = path.resolve('./src/code')
 const nextConfig = {
   pageExtensions: ['js', 'jsx', 'ts', 'tsx', 'mdx'],
   basePath: '',
+  headers: async () => [
+    {
+      source: '/:path*',
+      headers: [{
+        // config to prevent the browser from rendering the page inside a frame or iframe and avoid clickjacking http://en.wikipedia.org/wiki/Clickjacking
+        key: 'X-Frame-Options',
+        value: 'SAMEORIGIN'
+      }],
+    }
+  ],
   webpack: config => {
     const codeFilesHash = getFilesHash(codeSnippetsDir)
     config.cache.version = config.cache.version + delimiter + codeFilesHash