Merge branch 'main' of github.com:rezozero/nuxt-starter into main

rezozero · Apr 22, 2024 · 3bc9e98 · 3bc9e98
2 parents 02c4db2 + f2daf63
commit 3bc9e98
Showing 1 changed file with 20 additions and 0 deletions.
diff --git a/nuxt.config.ts b/nuxt.config.ts
@@ -70,6 +70,26 @@ export default defineNuxtConfig({
             }),
         ],
     },
+    nitro: {
+        routeRules: {
+            '/**': {
+                headers: {
+                    // https://web.dev/articles/floc?hl=fr#can_websites_opt_out_of_being_included_in_the_floc_computation
+                    'Permissions-Policy': 'interest-cohort=()',
+                    // Hardening client security policies
+                    // https://developer.mozilla.org/fr/docs/Web/HTTP/CSP
+                    'Content-Security-Policy': [
+                        // Only allows these iframe origins
+                        "frame-src 'self' *.youtube.com *.vimeo.com *.instagram.com *.soundcloud.com *.google.com",
+                        // Only allows these script origins
+                        //"script-src 'self' 'unsafe-inline' *.google.com *.googleapis.com *.gstatic.com",
+                        // Only allows these images origins
+                        //"img-src 'self' 'unsafe-inline' *.googleapis.com *.gstatic.com",
+                    ].join('; '),
+                },
+            },
+        },
+    },
     // https://github.com/nuxt-modules/svg-sprite#options
     svgSprite: {
         input: '~/assets/images/icons',