From 3db98cbfa016e2033d665c21b020d5064a2ee1f4 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Tao=20Bojl=C3=A9n?=
 <2803708-tao_oat@users.noreply.gitlab.com>
Date: Tue, 19 May 2020 15:19:01 +0000
Subject: [PATCH] add security headers to netlify frontend

---
 netlify.toml | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/netlify.toml b/netlify.toml
index 5b70f41..2caf14b 100644
--- a/netlify.toml
+++ b/netlify.toml
@@ -2,6 +2,9 @@
   base = "frontend/"
   publish = "frontend/build/"
 
+[build.environment]
+  INLINE_RUNTIME_CHUNK = "false"
+
 [context.develop.environment]
   REACT_APP_STAGING = "true"
 
@@ -16,3 +19,11 @@
   to = "/index.html"
   status = 200
 
+[[headers]]
+  for = "/*"
+  [headers.values]
+  X-Content-Type-Options = "nosniff"
+  X-Frame-Options = "DENY"
+  X-XSS-Protection = "1"
+  Content-Security-Policy = "default-src 'self' https://*.fediverse.space; style-src 'self' 'unsafe-inline'"
+