chore(security): add headers to prevent iframe embedding

tyronejosee · Nov 12, 2024 · c7e7475 · c7e7475
1 parent a97fe98
commit c7e7475
Show file tree

Hide file tree

Showing 144 changed files with 17 additions and 2 deletions.
diff --git a/assets/artists/Cohen Floch/Cohen Floch (1).webp b/assets/artists/Cohen Floch/Cohen Floch (1).webp
diff --git a/assets/artists/Cohen Floch/Cohen Floch (10).webp b/assets/artists/Cohen Floch/Cohen Floch (10).webp
diff --git a/assets/artists/Cohen Floch/Cohen Floch (11).webp b/assets/artists/Cohen Floch/Cohen Floch (11).webp
diff --git a/assets/artists/Cohen Floch/Cohen Floch (12).webp b/assets/artists/Cohen Floch/Cohen Floch (12).webp
diff --git a/assets/artists/Cohen Floch/Cohen Floch (2).webp b/assets/artists/Cohen Floch/Cohen Floch (2).webp
diff --git a/assets/artists/Cohen Floch/Cohen Floch (3).webp b/assets/artists/Cohen Floch/Cohen Floch (3).webp
diff --git a/assets/artists/Cohen Floch/Cohen Floch (4).webp b/assets/artists/Cohen Floch/Cohen Floch (4).webp
diff --git a/assets/artists/Cohen Floch/Cohen Floch (5).webp b/assets/artists/Cohen Floch/Cohen Floch (5).webp
diff --git a/assets/artists/Cohen Floch/Cohen Floch (6).webp b/assets/artists/Cohen Floch/Cohen Floch (6).webp
diff --git a/assets/artists/Cohen Floch/Cohen Floch (7).webp b/assets/artists/Cohen Floch/Cohen Floch (7).webp
diff --git a/assets/artists/Cohen Floch/Cohen Floch (8).webp b/assets/artists/Cohen Floch/Cohen Floch (8).webp
diff --git a/assets/artists/Cohen Floch/Cohen Floch (9).webp b/assets/artists/Cohen Floch/Cohen Floch (9).webp
diff --git a/assets/artists/Deanna James/Deanna James (1).webp b/assets/artists/Deanna James/Deanna James (1).webp
diff --git a/assets/artists/Deanna James/Deanna James (10).webp b/assets/artists/Deanna James/Deanna James (10).webp
diff --git a/assets/artists/Deanna James/Deanna James (11).webp b/assets/artists/Deanna James/Deanna James (11).webp
diff --git a/assets/artists/Deanna James/Deanna James (12).webp b/assets/artists/Deanna James/Deanna James (12).webp
diff --git a/assets/artists/Deanna James/Deanna James (2).webp b/assets/artists/Deanna James/Deanna James (2).webp
diff --git a/assets/artists/Deanna James/Deanna James (3).webp b/assets/artists/Deanna James/Deanna James (3).webp
diff --git a/assets/artists/Deanna James/Deanna James (4).webp b/assets/artists/Deanna James/Deanna James (4).webp
diff --git a/assets/artists/Deanna James/Deanna James (5).webp b/assets/artists/Deanna James/Deanna James (5).webp
diff --git a/assets/artists/Deanna James/Deanna James (6).webp b/assets/artists/Deanna James/Deanna James (6).webp
diff --git a/assets/artists/Deanna James/Deanna James (7).webp b/assets/artists/Deanna James/Deanna James (7).webp
diff --git a/assets/artists/Deanna James/Deanna James (8).webp b/assets/artists/Deanna James/Deanna James (8).webp
diff --git a/assets/artists/Deanna James/Deanna James (9).webp b/assets/artists/Deanna James/Deanna James (9).webp
diff --git a/assets/artists/Emma Brown/Emma Brown (1).webp b/assets/artists/Emma Brown/Emma Brown (1).webp
diff --git a/assets/artists/Emma Brown/Emma Brown (10).webp b/assets/artists/Emma Brown/Emma Brown (10).webp
diff --git a/assets/artists/Emma Brown/Emma Brown (11).webp b/assets/artists/Emma Brown/Emma Brown (11).webp
diff --git a/assets/artists/Emma Brown/Emma Brown (12).webp b/assets/artists/Emma Brown/Emma Brown (12).webp
diff --git a/assets/artists/Emma Brown/Emma Brown (2).webp b/assets/artists/Emma Brown/Emma Brown (2).webp
diff --git a/assets/artists/Emma Brown/Emma Brown (3).webp b/assets/artists/Emma Brown/Emma Brown (3).webp
diff --git a/assets/artists/Emma Brown/Emma Brown (4).webp b/assets/artists/Emma Brown/Emma Brown (4).webp
diff --git a/assets/artists/Emma Brown/Emma Brown (5).webp b/assets/artists/Emma Brown/Emma Brown (5).webp
diff --git a/assets/artists/Emma Brown/Emma Brown (6).webp b/assets/artists/Emma Brown/Emma Brown (6).webp
diff --git a/assets/artists/Emma Brown/Emma Brown (7).webp b/assets/artists/Emma Brown/Emma Brown (7).webp
diff --git a/assets/artists/Emma Brown/Emma Brown (8).webp b/assets/artists/Emma Brown/Emma Brown (8).webp
diff --git a/assets/artists/Emma Brown/Emma Brown (9).webp b/assets/artists/Emma Brown/Emma Brown (9).webp
diff --git a/assets/artists/John Smith/John Smith (1).webp b/assets/artists/John Smith/John Smith (1).webp
diff --git a/assets/artists/John Smith/John Smith (10).webp b/assets/artists/John Smith/John Smith (10).webp
diff --git a/assets/artists/John Smith/John Smith (11).webp b/assets/artists/John Smith/John Smith (11).webp
diff --git a/assets/artists/John Smith/John Smith (12).webp b/assets/artists/John Smith/John Smith (12).webp
diff --git a/assets/artists/John Smith/John Smith (2).webp b/assets/artists/John Smith/John Smith (2).webp
diff --git a/assets/artists/John Smith/John Smith (3).webp b/assets/artists/John Smith/John Smith (3).webp
diff --git a/assets/artists/John Smith/John Smith (4).webp b/assets/artists/John Smith/John Smith (4).webp
diff --git a/assets/artists/John Smith/John Smith (5).webp b/assets/artists/John Smith/John Smith (5).webp
diff --git a/assets/artists/John Smith/John Smith (6).webp b/assets/artists/John Smith/John Smith (6).webp
diff --git a/assets/artists/John Smith/John Smith (7).webp b/assets/artists/John Smith/John Smith (7).webp
diff --git a/assets/artists/John Smith/John Smith (8).webp b/assets/artists/John Smith/John Smith (8).webp
diff --git a/assets/artists/John Smith/John Smith (9).webp b/assets/artists/John Smith/John Smith (9).webp
diff --git a/assets/artists/Michael Johnson/Michael Johnson (1).webp b/assets/artists/Michael Johnson/Michael Johnson (1).webp
diff --git a/assets/artists/Michael Johnson/Michael Johnson (10).webp b/assets/artists/Michael Johnson/Michael Johnson (10).webp
diff --git a/assets/artists/Michael Johnson/Michael Johnson (11).webp b/assets/artists/Michael Johnson/Michael Johnson (11).webp
diff --git a/assets/artists/Michael Johnson/Michael Johnson (12).webp b/assets/artists/Michael Johnson/Michael Johnson (12).webp
diff --git a/assets/artists/Michael Johnson/Michael Johnson (2).webp b/assets/artists/Michael Johnson/Michael Johnson (2).webp
diff --git a/assets/artists/Michael Johnson/Michael Johnson (3).webp b/assets/artists/Michael Johnson/Michael Johnson (3).webp
diff --git a/assets/artists/Michael Johnson/Michael Johnson (4).webp b/assets/artists/Michael Johnson/Michael Johnson (4).webp
diff --git a/assets/artists/Michael Johnson/Michael Johnson (5).webp b/assets/artists/Michael Johnson/Michael Johnson (5).webp
diff --git a/assets/artists/Michael Johnson/Michael Johnson (6).webp b/assets/artists/Michael Johnson/Michael Johnson (6).webp
diff --git a/assets/artists/Michael Johnson/Michael Johnson (7).webp b/assets/artists/Michael Johnson/Michael Johnson (7).webp
diff --git a/assets/artists/Michael Johnson/Michael Johnson (8).webp b/assets/artists/Michael Johnson/Michael Johnson (8).webp
diff --git a/assets/artists/Michael Johnson/Michael Johnson (9).webp b/assets/artists/Michael Johnson/Michael Johnson (9).webp
diff --git a/assets/artists/Owen Blake/Binary Flow.webp b/assets/artists/Owen Blake/Binary Flow.webp
diff --git a/assets/artists/Owen Blake/Cyber Flux.webp b/assets/artists/Owen Blake/Cyber Flux.webp
diff --git a/assets/artists/Owen Blake/Digital Gaze.webp b/assets/artists/Owen Blake/Digital Gaze.webp
diff --git a/assets/artists/Owen Blake/Digital Palm.webp b/assets/artists/Owen Blake/Digital Palm.webp
diff --git a/assets/artists/Owen Blake/Mecha Collar.webp b/assets/artists/Owen Blake/Mecha Collar.webp
diff --git a/assets/artists/Owen Blake/Owen Blake (1).webp b/assets/artists/Owen Blake/Owen Blake (1).webp
diff --git a/assets/artists/Owen Blake/Owen Blake (2).webp b/assets/artists/Owen Blake/Owen Blake (2).webp
diff --git a/assets/artists/Owen Blake/Owen Blake (3).webp b/assets/artists/Owen Blake/Owen Blake (3).webp
diff --git a/assets/artists/Owen Blake/Owen Blake (4).webp b/assets/artists/Owen Blake/Owen Blake (4).webp
diff --git a/assets/artists/Owen Blake/Owen Blake (5).webp b/assets/artists/Owen Blake/Owen Blake (5).webp
diff --git a/assets/artists/Owen Blake/Techno Grip.webp b/assets/artists/Owen Blake/Techno Grip.webp
diff --git a/assets/artists/Owen Blake/Techno Spectrum.webp b/assets/artists/Owen Blake/Techno Spectrum.webp
diff --git a/assets/artists/Sebastian Cole/Bronze Spirit.webp b/assets/artists/Sebastian Cole/Bronze Spirit.webp
diff --git a/assets/artists/Sebastian Cole/Carved Eternity.webp b/assets/artists/Sebastian Cole/Carved Eternity.webp
diff --git a/assets/artists/Sebastian Cole/Eternal Marble.webp b/assets/artists/Sebastian Cole/Eternal Marble.webp
diff --git a/assets/artists/Sebastian Cole/Flesh and Stone.webp b/assets/artists/Sebastian Cole/Flesh and Stone.webp
diff --git a/assets/artists/Sebastian Cole/Granite Grace.webp b/assets/artists/Sebastian Cole/Granite Grace.webp
diff --git a/assets/artists/Sebastian Cole/Laconic Pride.webp b/assets/artists/Sebastian Cole/Laconic Pride.webp
diff --git a/assets/artists/Sebastian Cole/Monumental Essence.webp b/assets/artists/Sebastian Cole/Monumental Essence.webp
diff --git a/assets/artists/Sebastian Cole/Phalanx Formation.webp b/assets/artists/Sebastian Cole/Phalanx Formation.webp
diff --git a/assets/artists/Sebastian Cole/Sculpted Soul.webp b/assets/artists/Sebastian Cole/Sculpted Soul.webp
diff --git a/assets/artists/Sebastian Cole/Stone Guardian.webp b/assets/artists/Sebastian Cole/Stone Guardian.webp
diff --git a/assets/artists/Sebastian Cole/The Statue of Liberty.webp b/assets/artists/Sebastian Cole/The Statue of Liberty.webp
diff --git a/assets/artists/Sebastian Cole/Warrior Spirit.webp b/assets/artists/Sebastian Cole/Warrior Spirit.webp
diff --git a/assets/artists/Zara Moon/Zara Moon (1).webp b/assets/artists/Zara Moon/Zara Moon (1).webp
diff --git a/assets/artists/Zara Moon/Zara Moon (10).webp b/assets/artists/Zara Moon/Zara Moon (10).webp
diff --git a/assets/artists/Zara Moon/Zara Moon (11).webp b/assets/artists/Zara Moon/Zara Moon (11).webp
diff --git a/assets/artists/Zara Moon/Zara Moon (12).webp b/assets/artists/Zara Moon/Zara Moon (12).webp
diff --git a/assets/artists/Zara Moon/Zara Moon (2).webp b/assets/artists/Zara Moon/Zara Moon (2).webp
diff --git a/assets/artists/Zara Moon/Zara Moon (3).webp b/assets/artists/Zara Moon/Zara Moon (3).webp
diff --git a/assets/artists/Zara Moon/Zara Moon (4).webp b/assets/artists/Zara Moon/Zara Moon (4).webp
diff --git a/assets/artists/Zara Moon/Zara Moon (5).webp b/assets/artists/Zara Moon/Zara Moon (5).webp
diff --git a/assets/artists/Zara Moon/Zara Moon (6).webp b/assets/artists/Zara Moon/Zara Moon (6).webp
diff --git a/assets/artists/Zara Moon/Zara Moon (7).webp b/assets/artists/Zara Moon/Zara Moon (7).webp
diff --git a/assets/artists/Zara Moon/Zara Moon (8).webp b/assets/artists/Zara Moon/Zara Moon (8).webp
diff --git a/assets/artists/Zara Moon/Zara Moon (9).webp b/assets/artists/Zara Moon/Zara Moon (9).webp
diff --git a/assets/artists/cohen-floch.webp b/assets/artists/cohen-floch.webp
diff --git a/assets/artists/deanna-james.webp b/assets/artists/deanna-james.webp
diff --git a/assets/artists/emma-brown.webp b/assets/artists/emma-brown.webp
diff --git a/assets/artists/john.webp b/assets/artists/john.webp
diff --git a/assets/artists/michael_johnson.webp b/assets/artists/michael_johnson.webp
diff --git a/assets/artists/owen-blake.webp b/assets/artists/owen-blake.webp
diff --git a/assets/artists/sebastian-cole.webp b/assets/artists/sebastian-cole.webp
diff --git a/assets/artists/zara-moon.webp b/assets/artists/zara-moon.webp
diff --git a/assets/products/products (1).webp b/assets/products/products (1).webp
diff --git a/assets/products/products (10).webp b/assets/products/products (10).webp
diff --git a/assets/products/products (11).webp b/assets/products/products (11).webp
diff --git a/assets/products/products (12).webp b/assets/products/products (12).webp
diff --git a/assets/products/products (13).webp b/assets/products/products (13).webp
diff --git a/assets/products/products (14).webp b/assets/products/products (14).webp
diff --git a/assets/products/products (15).webp b/assets/products/products (15).webp
diff --git a/assets/products/products (16).webp b/assets/products/products (16).webp
diff --git a/assets/products/products (17).webp b/assets/products/products (17).webp
diff --git a/assets/products/products (18).webp b/assets/products/products (18).webp
diff --git a/assets/products/products (19).webp b/assets/products/products (19).webp
diff --git a/assets/products/products (2).webp b/assets/products/products (2).webp
diff --git a/assets/products/products (20).webp b/assets/products/products (20).webp
diff --git a/assets/products/products (21).webp b/assets/products/products (21).webp
diff --git a/assets/products/products (22).webp b/assets/products/products (22).webp
diff --git a/assets/products/products (23).webp b/assets/products/products (23).webp
diff --git a/assets/products/products (24).webp b/assets/products/products (24).webp
diff --git a/assets/products/products (25).webp b/assets/products/products (25).webp
diff --git a/assets/products/products (26).webp b/assets/products/products (26).webp
diff --git a/assets/products/products (27).webp b/assets/products/products (27).webp
diff --git a/assets/products/products (28).webp b/assets/products/products (28).webp
diff --git a/assets/products/products (29).webp b/assets/products/products (29).webp
diff --git a/assets/products/products (3).webp b/assets/products/products (3).webp
diff --git a/assets/products/products (30).webp b/assets/products/products (30).webp
diff --git a/assets/products/products (4).webp b/assets/products/products (4).webp
diff --git a/assets/products/products (5).webp b/assets/products/products (5).webp
diff --git a/assets/products/products (6).webp b/assets/products/products (6).webp
diff --git a/assets/products/products (7).webp b/assets/products/products (7).webp
diff --git a/assets/products/products (8).webp b/assets/products/products (8).webp
diff --git a/assets/products/products (9).webp b/assets/products/products (9).webp
diff --git a/assets/references/AdobeStock_101052491.jpeg b/assets/references/AdobeStock_101052491.jpeg
diff --git a/assets/references/photo-1605647533135-51b5906087d0.jpg b/assets/references/photo-1605647533135-51b5906087d0.jpg
diff --git a/assets/references/tattoo+machine+black+and+grey.jpg b/assets/references/tattoo+machine+black+and+grey.jpg
diff --git a/assets/services/design-tattoo.webp b/assets/services/design-tattoo.webp
diff --git a/assets/services/handpoke-tattoo.webp b/assets/services/handpoke-tattoo.webp
diff --git a/assets/services/piercing.webp b/assets/services/piercing.webp
diff --git a/assets/services/realistic-tattoo.webp b/assets/services/realistic-tattoo.webp
diff --git a/assets/services/tattoo-removal.webp b/assets/services/tattoo-removal.webp
diff --git a/assets/services/tribal-tattoo.webp b/assets/services/tribal-tattoo.webp
diff --git a/frontend/next.config.mjs b/frontend/next.config.mjs
@@ -5,15 +5,30 @@ const nextConfig = {
       {
         protocol: 'http',
         hostname: '127.0.0.1:8100',
-        // port: '8100',
-        // pathname: '/media/artists/**',
       },
       {
         protocol: 'https',
         hostname: 'res.cloudinary.com',
       }
     ],
   },
+  async headers() {
+    return [
+      {
+        source: '/(.*)', // Apply headers to all routes
+        headers: [
+          {
+            key: 'X-Frame-Options',
+            value: 'DENY', // Prevents any embedding in an iframe
+          },
+          {
+            key: 'Content-Security-Policy',
+            value: "frame-ancestors 'none';", // CSP to block external iframes
+          },
+        ],
+      },
+    ];
+  },
 };
 
 export default nextConfig;