next.config.js CSP 옵션 수정

youngwan2 · Jul 11, 2024 · 874dff6 · 874dff6
1 parent a7cfbac
commit 874dff6
Showing 1 changed file with 10 additions and 4 deletions.
diff --git a/next.config.js b/next.config.js
@@ -1,10 +1,16 @@
 /** @type {import('next').NextConfig} */
 
 const ContentSecurityPolicy = `
-  default-src 'self';
-  script-src 'self' 'unsafe-eval' 'unsafe-inline';
-  style-src 'self' 'unsafe-inline';
-  img-src 'self' data:;
+default-src 'self';
+script-src 'self' 'unsafe-eval' 'unsafe-inline';
+style-src 'self' 'unsafe-inline';
+img-src 'self';
+font-src 'self';
+object-src 'none';
+base-uri 'self';
+form-action 'self';
+frame-ancestors 'none';
+upgrade-insecure-requests;
 `