From c42674595c2de5d79cb76fb955a98aaae8b1969b Mon Sep 17 00:00:00 2001
From: Alex van Andel <me@alexvanandel.com>
Date: Wed, 1 Feb 2023 05:58:47 +0000
Subject: [PATCH] Add X-Frame-Options to page headers (#6784)

Co-authored-by: Hariom Balhara <hariombalhara@gmail.com>
---
 apps/web/next.config.js | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

diff --git a/apps/web/next.config.js b/apps/web/next.config.js
index 4c046f461d..c3afcc7ac6 100644
--- a/apps/web/next.config.js
+++ b/apps/web/next.config.js
@@ -176,6 +176,20 @@ const nextConfig = {
       }, */
     ];
   },
+  async headers() {
+    return [
+      {
+        // prettier-ignore
+        source: "/:path*((?<!\/embed$)(?<!\/embed\/preview\.html$))",
+        headers: [
+          {
+            key: "X-Frame-Options",
+            value: "DENY",
+          },
+        ],
+      },
+    ];
+  },
   async redirects() {
     const redirects = [
       {