Agentic-vDesktops/next.config.ts at main · modl-foundation/Agentic-vDesktops · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
import type { NextConfig } from "next";

const nextConfig: NextConfig = {
  images: {
    domains: ["www.notte.cc", "www.orgo.ai", "www.notion.com"],
  },
  async headers() {
    return [
      {
        source: "/:path*",
        headers: [
          {
            key: "Content-Security-Policy",
            value: [
              "default-src 'self'",
              "object-src 'self' data:", // <-- allow object/embed to use data: URIs
              [
                "connect-src 'self'",
                "https://*.e2b.dev",
                "https://*.e2b.app",
                "https://auth.privy.io",
                "https://www.privy.io",
                "https://api.web3modal.org",
                "https://pulse.walletconnect.org",
                "https://explorer-api.walletconnect.com",
                "https://relay.walletconnect.com",
                "wss://relay.walletconnect.com",
              ].join(" "),
              [
                "frame-src 'self'",
                "https://*.e2b.dev",
                "https://*.e2b.app",
                "https://va.vercel-scripts.com",
                "https://auth.privy.io",
                "https://www.privy.io",
              ].join(" "),
              [
                "frame-ancestors 'self'",
                "https://*.e2b.dev",
                "https://*.e2b.app",
              ].join(" "),
              [
                "img-src 'self' data:",
                "https://*.e2b.dev",
                "https://*.e2b.app",
                "https://www.notte.cc",
                "https://www.orgo.ai",
                "https://www.notion.com",
              ].join(" "),
              [
                "script-src 'self' 'unsafe-inline' 'unsafe-eval'",
                "https://*.e2b.dev",
                "https://*.e2b.app",
                "https://va.vercel-scripts.com",
              ].join(" "),
              "style-src 'self' 'unsafe-inline'",
            ].join("; "),
          },
          {
            key: "X-Frame-Options",
            value: "SAMEORIGIN",
          },
        ],
      },
    ];
  },
};

export default nextConfig;