Function headers

next.config.js:20–58

()

  reactStrictMode: true,
  poweredByHeader: false,
  async headers() {
    return [
      {
        source: "/([^/]*?)", // Match all non-nested pages
        headers: [{
          key: "X-Content-Type-Options",
          value: "nosniff",
        },
        {
          key: "X-Frame-Options",
          value: "deny"
        },
        {
          key: "Content-Security-Policy",
          value: "frame-ancestors 'none'"
        }
        ]
      },
      {
        source: "/(.*?)", // Match all pages
        headers: [{
          key: "Strict-Transport-Security",
          value: "max-age=31536000; includeSubDomains",
        }]
      },
      {
        source: "/api/(.*)", // All Serverless API endpoints (NOT Edge Functions)
        headers: [{
          key: "Cache-Control",
          value: "no-store"
        }],
      },
      {
        source: "/api/v1/(.*)", // Public endpoints
        // This enables calls to /api/v1 from users' domains
        headers: headers,
      },
    ];
  },
};

// Injected content via Sentry wizard below