chore: ensure propder CSP setup for dashboard and website

Author: danh91

apps/dashboard/next.config.mjs

@@ -85,6 +85,23 @@ const nextConfig = {
   sassOptions: {
     includePaths: [path.join("src", "styles")],
   },
+  async headers() {
+    return [
+      {
+        source: '/(.*)',
+        headers: [
+          {
+            key: 'X-Frame-Options',
+            value: 'DENY',
+          },
+          {
+            key: 'Content-Security-Policy',
+            value: "frame-ancestors 'none';",
+          },
+        ],
+      },
+    ];
+  },
   webpack: (config, { isServer, dev }) => {
     config.resolve.fallback = { fs: false, net: false, tls: false };
     config.externals.push("pino-pretty", "encoding");

apps/web/next.config.mjs

@@ -13,6 +13,23 @@ const nextConfig = {
   sassOptions: {
     includePaths: [path.join("src", "styles")],
   },
+  async headers() {
+    return [
+      {
+        source: '/(.*)',
+        headers: [
+          {
+            key: 'X-Frame-Options',
+            value: 'DENY',
+          },
+          {
+            key: 'Content-Security-Policy',
+            value: "frame-ancestors 'none';",
+          },
+        ],
+      },
+    ];
+  },
   webpack: (config) => {
     config.resolve.fallback = { fs: false, net: false, tls: false };
     config.externals.push("pino-pretty", "encoding");