fix(web): security headers

tryabby · Aug 7, 2024 · 667505c · 667505c
1 parent 524a48b
commit 667505c
Showing 1 changed file with 0 additions and 7 deletions.
diff --git a/apps/web/next.config.mjs b/apps/web/next.config.mjs
@@ -31,14 +31,7 @@ const withBundleAnalyzer = bundleAnalzyer({
 !process.env.SKIP_ENV_VALIDATION && (await import("./src/env/server.mjs"));
 
 const cspHeader = `
-    default-src 'self';
-    style-src 'self' 'unsafe-inline';
-    font-src 'self';
-    object-src 'none';
-    base-uri 'self';
-    form-action 'self';
     frame-ancestors 'none';
-    upgrade-insecure-requests;
 `;
 
 /** @type {import("next").NextConfig} */