[Update] Security headers (#62)

* chore: add security headers * chore: added permissive connect-src to csp
Open-Attestation · Jul 23, 2024 · 3436bc3 · 3436bc3
1 parent 1ab1052
commit 3436bc3
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/public/_headers b/public/_headers
@@ -0,0 +1,2 @@
+X-Frame-Options: DENY
+Content-Security-Policy: default-src 'self' *.sepolia.org *.polygon.technology dns.google cloudflare-dns.com; frame-ancestors 'self' 'none'; connect-src 'self' *;