-
Notifications
You must be signed in to change notification settings - Fork 0
/
next.config.js
127 lines (123 loc) · 3.15 KB
/
next.config.js
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
module.exports = {
reactStrictMode: true,
productionBrowserSourceMaps: true,
outputFileTracing: false,
compiler: {
// ssr and displayName are configured by default
styledComponents: true,
reactRemoveProperties: false,
},
images: {
domains: ["placehold.jp", "i.discogs.com"],
},
webpack(config) {
config.module.rules.push({
test: /\.svg$/,
use: ["@svgr/webpack"],
});
return config;
},
async headers() {
return [
{
source: "/",
headers: [
{
key: "Cache-Control",
value: "s-maxage=1, stale-while-revalidate",
},
...securityHeaders,
],
},
{
source: "/:path*",
headers: [
{
key: "Cache-Control",
value: "s-maxage=1, stale-while-revalidate",
},
...securityHeaders,
],
},
{
source: "/fonts/averta-font/(.*)",
headers: [
{
key: "Cache-Control",
value: "public, max-age=31536000, stale-while-revalidate",
},
...securityHeaders,
],
},
{
source: "/fonts/fontface.css",
headers: [
{
key: "Cache-Control",
value: "public, max-age=31536000, stale-while-revalidate",
},
...securityHeaders,
],
},
];
},
};
// https://securityheaders.com
const scriptSrc = [
"'self'",
"'unsafe-eval'",
"'unsafe-inline'",
"polyfill.io",
"*.googletagmanager.com",
];
const ContentSecurityPolicy = `
default-src 'self';
script-src ${scriptSrc.join(" ")};
child-src *.youtube.com *.google.com;
style-src 'self' 'unsafe-inline' *.googleapis.com *.google.com *.googletagmanager.com;
img-src * blob: data: i.discogs.com;
object-src * blob: data:;
media-src 'self';
connect-src *;
frame-src * 'self' blob: data:;
font-src 'self' data: fonts.gstatic.com;
worker-src 'self' *.vercel.app;
manifest-src 'self' *.vercel.app;
`;
const securityHeaders = [
// https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP
{
key: "Content-Security-Policy",
value: ContentSecurityPolicy.replace(/\n/g, ""),
},
// https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referrer-Policy
{
key: "Referrer-Policy",
value: "strict-origin-when-cross-origin",
},
// https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Frame-Options
{
key: "X-Frame-Options",
value: "SAMEORIGIN",
},
// https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Content-Type-Options
{
key: "X-Content-Type-Options",
value: "nosniff",
},
// https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-DNS-Prefetch-Control
{
key: "X-DNS-Prefetch-Control",
value: "on",
},
// https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Strict-Transport-Security
{
key: "Strict-Transport-Security",
value: "max-age=31536000; includeSubDomains; preload",
},
// https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Feature-Policy
{
key: "Permissions-Policy",
value: "camera=(), microphone=(), geolocation=(), interest-cohort=()",
},
];