ecc-openlxp-xms-ui/next.config.js at main · adlnet/ecc-openlxp-xms-ui · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
const { createSecureHeaders } = require("next-secure-headers");

const nextConfig = {
    reactStrictMode: true,
    // swcMinify: true,
    basePath: '/xms-ui',
    trailingSlash: true,

    // Adding policies:
    async headers() {
        return [
            {
                source: '/(.*)',
                headers: createSecureHeaders({
                    contentSecurityPolicy: {
                        directives: {
                            defaultSrc: [
                                "'self'",
                                "https://ecc.staging.dso.mil",
                                "https://ecc.staging.dso.mil/ecc-openlxp-xms",
                                "https://ecc.staging.dso.mil/ecc-openlxp-xms-ui/",
                                "https://ecc.apps.dso.mil/",
                                "https://ecc.apps.dso.mil/ecc-openlxp-xms-ui/",
                                "https://fonts.googleapis.com"
                            ],
                            styleSrc: [
                                "'self'",
                                "https://ecc.staging.dso.mil",
                                "https://ecc.staging.dso.mil/ecc-openlxp-xms",
                                "https://ecc.staging.dso.mil/ecc-openlxp-xms-ui/",
                                "https://ecc.apps.dso.mil/",
                                "https://ecc.apps.dso.mil/ecc-openlxp-xms-ui/",
                                "https://fonts.googleapis.com"
                            ],
                            imgSrc: ["'self'",
                                    "data:",
                                    "data:*",
                            ],
                            fontSrc: [
                                "'self'",
                                "https://fonts.gstatic.com"
                            ],
                            frameAncestors: [
                                "'self'",
                                "https://ecc.apps.dso.mil/",
                                "https://ecc.apps.dso.mil/ecc-openlxp-xms-ui/",
                                "https://ecc.staging.dso.mil/ecc-openlxp-xms-ui/"
                            ]
                        },
                        frameGuard: "deny",
                        noopen: "noopen",
                        nosniff: "nosniff",
                        xssProtection: "sanitize",
                        referrerPolicy: "origin-when-cross-origin",
                    }
                })
            },
        ];
    },
}

module.exports = nextConfig