From aa32fe782f5be63ab0cbc02616bd6e88775ff8f3 Mon Sep 17 00:00:00 2001
From: Baptiste Arnaud <contact@baptiste-arnaud.fr>
Date: Wed, 18 Jan 2023 20:56:48 +0100
Subject: [PATCH] :lock: Add X-Frame-Options header in builder and lp

---
 apps/builder/next.config.js      | 13 +++++++++++++
 apps/landing-page/next.config.js | 13 +++++++++++++
 2 files changed, 26 insertions(+)

diff --git a/apps/builder/next.config.js b/apps/builder/next.config.js
index 262a91d41..8d05f4cc7 100644
--- a/apps/builder/next.config.js
+++ b/apps/builder/next.config.js
@@ -14,6 +14,19 @@ const nextConfig = withTM({
   experimental: {
     outputFileTracingRoot: path.join(__dirname, '../../'),
   },
+  headers: async () => {
+    return [
+      {
+        source: '/(.*)?',
+        headers: [
+          {
+            key: 'X-Frame-Options',
+            value: 'DENY',
+          },
+        ],
+      },
+    ]
+  },
 })
 
 const sentryWebpackPluginOptions = {
diff --git a/apps/landing-page/next.config.js b/apps/landing-page/next.config.js
index 5696b60c9..2087d9fed 100644
--- a/apps/landing-page/next.config.js
+++ b/apps/landing-page/next.config.js
@@ -60,5 +60,18 @@ module.exports = withTM(
         ],
       }
     },
+    headers: async () => {
+      return [
+        {
+          source: '/(.*)?',
+          headers: [
+            {
+              key: 'X-Frame-Options',
+              value: 'DENY',
+            },
+          ],
+        },
+      ]
+    },
   })
 )