fix(header): prevent clickjack/iframing

datahub-project · Jan 13, 2025 · 13d3de7 · 13d3de7
1 parent 457f96e
commit 13d3de7
Showing 1 changed file with 16 additions and 0 deletions.
diff --git a/docs-website/docusaurus.config.js b/docs-website/docusaurus.config.js
@@ -13,6 +13,22 @@ module.exports = {
   projectName: "datahub", // Usually your repo name.
   staticDirectories: ["static", "genStatic"],
   stylesheets: ["https://fonts.googleapis.com/css2?family=Manrope:wght@400;500;700&display=swap"],
+  headTags: [
+    {
+      tagName: 'meta',
+      attributes: {
+        httpEquiv: 'Content-Security-Policy',
+        content: "frame-ancestors 'none'"
+      }
+    },
+    {
+      tagName: 'meta',
+      attributes: {
+        httpEquiv: 'X-Frame-Options',
+        content: 'DENY'
+      }
+    }
+  ],
   scripts: [
     {
       src: "https://tools.luckyorange.com/core/lo.js?site-id=28ea8a38",