Merge pull request #4173 from bcgov/chore/428-wava-low-priority-issues

chore: add headers to next config

Author: dleard

bciers/next.config.base.js

@@ -3,6 +3,7 @@ const { withSentryConfig } = require("@sentry/nextjs");
 const path = require("node:path");
 
 const baseConfig = {
+  poweredByHeader: false,
   reactStrictMode: true,
   output: "standalone",
   turbopack: {
@@ -57,6 +58,23 @@ const baseConfig = {
       },
     ];
   },
+  async headers() {
+    return [
+      {
+        source: "/(.*)",
+        headers: [
+          {
+            key: "X-Content-Type-Options",
+            value: "nosniff",
+          },
+          {
+            key: "Strict-Transport-Security",
+            value: "max-age=63072000; includeSubDomains;",
+          },
+        ],
+      },
+    ];
+  },
 };
 
 // Shared Sentry options for all apps