From b3e9df4f3dbbafc7d4ebf3b0b52cd871a591643b Mon Sep 17 00:00:00 2001 From: liyasthomas Date: Wed, 13 Oct 2021 08:58:40 +0530 Subject: [PATCH] fix: introduce X-Frame-Options header to prevent clickjacking --- netlify.toml | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/netlify.toml b/netlify.toml index 8a32b7ced..a00bb82a1 100644 --- a/netlify.toml +++ b/netlify.toml @@ -7,6 +7,12 @@ publish = "packages/hoppscotch-app/dist" command = "npx pnpm i --store=node_modules/.pnpm-store && npx pnpm run generate" +[[headers]] + for = "/*" + [headers.values] + X-Frame-Options = "DENY" + X-XSS-Protection = "1; mode=block" + [[redirects]] from = "/discord" to = "https://discord.gg/GAMWxmR"