feat(client): improve HTTP headers

Author: gustavotoyota

apps/client/quasar.config.js

@@ -62,7 +62,10 @@ module.exports = configure(function (ctx) {
       { path: 'sodium.universal' },
       { path: 'i18n.universal' },
       { path: 'vue.universal' },
-      { path: 'disable-cache.universal' },
+
+      { path: 'http-headers/disable-cache.universal' },
+      { path: 'http-headers/x-frame-options.universal' },
+      { path: 'http-headers/referrer-policy.universal' },
 
       { path: 'array-at-polyfill.client', server: false },
       { path: 'logger.client', server: false },

…ient/src/boot/disable-cache.universal.ts …/http-headers/disable-cache.universal.tsapps/client/src/boot/disable-cache.universal.ts renamed to apps/client/src/boot/http-headers/disable-cache.universal.ts apps/client/src/boot/disable-cache.universal.ts renamed to apps/client/src/boot/http-headers/disable-cache.universal.ts

@@ -0,0 +1,5 @@
+import { boot } from 'quasar/wrappers';
+
+export default boot(async ({ ssrContext }) => {
+  ssrContext?.res.setHeader('Referrer-Policy', 'no-referrer');
+});

apps/client/src/boot/http-headers/referrer-policy.universal.ts

@@ -0,0 +1,5 @@
+import { boot } from 'quasar/wrappers';
+
+export default boot(async ({ ssrContext }) => {
+  ssrContext?.res.setHeader('X-Frame-Options', 'DENY');
+});