feat: add security headers configuration to next.js

Author: leonyllukejayme

next.config.mjs

@@ -1,4 +1,22 @@
 /** @type {import('next').NextConfig} */
-const nextConfig = {};
+const nextConfig = {
+    async headers(){
+        return [
+            {
+                source: '/(.*)',
+                headers: [
+                    {
+                        key:'strict-transport-security', 
+                        value:'max-age=31536000; includeSubDomains; preload'
+                    },
+                    {
+                        key:'x-frame-options',
+                        value:'SAMEORIGIN'
+                    }
+                ]
+            }
+        ]
+    }
+};
 
 export default nextConfig;