fix: introduce X-Frame-Options header to prevent clickjacking
This commit is contained in:
@@ -7,6 +7,12 @@
|
|||||||
publish = "packages/hoppscotch-app/dist"
|
publish = "packages/hoppscotch-app/dist"
|
||||||
command = "npx pnpm i --store=node_modules/.pnpm-store && npx pnpm run generate"
|
command = "npx pnpm i --store=node_modules/.pnpm-store && npx pnpm run generate"
|
||||||
|
|
||||||
|
[[headers]]
|
||||||
|
for = "/*"
|
||||||
|
[headers.values]
|
||||||
|
X-Frame-Options = "DENY"
|
||||||
|
X-XSS-Protection = "1; mode=block"
|
||||||
|
|
||||||
[[redirects]]
|
[[redirects]]
|
||||||
from = "/discord"
|
from = "/discord"
|
||||||
to = "https://discord.gg/GAMWxmR"
|
to = "https://discord.gg/GAMWxmR"
|
||||||
|
|||||||
Reference in New Issue
Block a user