Merge pull request #6638 from ShashaankS/Clickjacking_enhancement

Clickjacking Security Enhancement

Author: leecalcote

gatsby-config.js

@@ -17,6 +17,19 @@ module.exports = {
   },
   trailingSlash: "never",
   plugins: [
+    {
+      resolve: "gatsby-plugin-netlify",
+      options: {
+        headers: {
+          "/*": [
+            "X-Frame-Options: SAMEORIGIN",
+            "Content-Security-Policy: frame-ancestors 'self'",
+          ],
+        },
+        mergeSecurityHeaders: true,
+        mergeCachingHeaders: true,
+      },
+    },
     {
       resolve: "gatsby-plugin-webpack-bundle-analyser-v2",
       options: {

package-lock.json

@@ -66,6 +66,7 @@
     "gatsby-plugin-manifest": "^5.11.0",
     "gatsby-plugin-mdx": "3.20.0",
     "gatsby-plugin-meta-redirect": "github:layer5labs/gatsby-plugin-meta-redirect",
+    "gatsby-plugin-netlify": "^5.1.1",
     "gatsby-plugin-preload-fonts": "^4.11.0",
     "gatsby-plugin-robots-txt": "^1.8.0",
     "gatsby-plugin-sharp": "^5.11.0",