Block /auth/:path, nothing else. (#6949)

* Block /auth/:path, nothing else. * Also add /signup
2023-02-08 16:27:18 +00:00 · 2023-02-08 16:27:18 +00:00 · f7445bf8a1
parent 9cad7086d7
commit f7445bf8a1
1 changed files with 10 additions and 2 deletions
--- a/apps/web/next.config.js
+++ b/apps/web/next.config.js
@ -185,8 +185,16 @@ const nextConfig = {
  async headers() {
    return [
      {
-        // prettier-ignore
-        source: "/:path*((?<!\/embed$)(?<!\/embed\/preview\.html$))",
+        source: "/auth/:path*",
+        headers: [
+          {
+            key: "X-Frame-Options",
+            value: "DENY",
+          },
+        ],
+      },
+      {
+        source: "/signup",
        headers: [
          {
            key: "X-Frame-Options",