diff --git a/.changeset/thirty-carrots-relate.md b/.changeset/thirty-carrots-relate.md new file mode 100644 index 000000000..45f4cf2f3 --- /dev/null +++ b/.changeset/thirty-carrots-relate.md @@ -0,0 +1,5 @@ +--- +"@opennextjs/aws": patch +--- + +chore(image): add content-security-policy and content-disposition diff --git a/packages/open-next/src/adapters/image-optimization-adapter.ts b/packages/open-next/src/adapters/image-optimization-adapter.ts index 1058e4dd0..d3b06257c 100644 --- a/packages/open-next/src/adapters/image-optimization-adapter.ts +++ b/packages/open-next/src/adapters/image-optimization-adapter.ts @@ -169,6 +169,11 @@ function buildSuccessResponse( Vary: "Accept", "Content-Type": result.contentType, "Cache-Control": `public,max-age=${result.maxAge},immutable`, + "Content-Disposition": + nextConfig.images.contentDispositionType ?? "attachment", + "Content-Security-Policy": + nextConfig.images.contentSecurityPolicy ?? + "script-src 'none'; frame-src 'none'; sandbox;", }; debug("result", result); if (etag) {