diff --git a/packages/backend/src/helpers/web-ui-handler.ts b/packages/backend/src/helpers/web-ui-handler.ts index 3509f122..23484b3e 100644 --- a/packages/backend/src/helpers/web-ui-handler.ts +++ b/packages/backend/src/helpers/web-ui-handler.ts @@ -10,7 +10,12 @@ const webUIHandler = async (app: Application) => { const indexHtml = join(dirname(webAppPath), 'build', 'index.html'); app.use(express.static(webBuildPath)); - app.get('*', (_req, res) => res.sendFile(indexHtml)); + app.get('*', (_req, res) => { + res.set('Content-Security-Policy', 'frame-ancestors: none;'); + res.set('X-Frame-Options', 'DENY'); + + res.sendFile(indexHtml); + }); }; export default webUIHandler;