ecc-openlxp-xds-ui/next.config.js at main · adlnet/ecc-openlxp-xds-ui · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
const { createSecureHeaders } = require("next-secure-headers");

const nextConfig = {
    reactStrictMode: true,
    swcMinify: true,
    // basePath: '/ecc-openlxp-xds-ui',

    // Adding policies:
    async headers() {
        return [
            {
                source: '/(.*)',
                headers: createSecureHeaders({
                    contentSecurityPolicy: {
                        directives: {
                            defaultSrc: [
                                "'self'",
                                "https://ecc.staging.dso.mil",
                                "https://ecc.staging.dso.mil/ecc-openlxp-xds/",
                                "https://ecc.apps.dso.mil",
                                "https://ecc.apps.dso.mil/ecc-openlxp-xds-ui/"
                            ],
                            styleSrc: [
                                "'self'",
                                "https://ecc.apps.dso.mil",
                                "https://ecc.apps.dso.mil/ecc-openlxp-xds-ui/",
                                "https://ecc.staging.dso.mil",
                                "https://fonts.googleapis.com"
                            ],
                            imgSrc: ["'self'",
                                    "data:",
                                    "data:*",
                                    "https://www.jcs.mil",
                                    "https://www.aetc.af.mil",
                                    "https://prod-discovery.edx-cdn.org",
                                    "https://media.defense.gov",
                                    "https://www.dote.osd.mil",
                                    "https://d15cw65ipctsrr.cloudfront.net",
                                    "https://d3njjcbhbojbot.cloudfront.net",
                                    "https://coursera-course-photos.s3.amazonaws.com",
                                    "https://ecc.apps.dso.mil"
                            ],
                            fontSrc: [
                                "'self'",
                                "https://fonts.gstatic.com"
                            ],
                            frameAncestors: [
                                "'self'",
                                "https://ecc.staging.dso.mil",
                                "https://ecc.apps.dso.mil",
                                "https://ecc.apps.dso.mil/ecc-openlxp-xms-ui/"
                            ]
                        },
                        frameGuard: "deny",
                        noopen: "noopen",
                        nosniff: "nosniff",
                        xssProtection: "sanitize",
                        referrerPolicy: "origin-when-cross-origin",
                    }
                })
            },
        ];
    },
}

module.exports = nextConfig