Configure Content-Security-Policy header

Overview

You can configure the Content-Security-Police HTTP header through the API in the next.config.js file of the Next.js renderer.

Configure CSP header

Perform the following:

1. Open the next.config.js file of Sitefinity Next.js renderer.

2. Extend the cspHeader with the required directives and sources
   EXAMPLE: To add a particular website as a secure source, modify the section in the following way:

   const cspHeader =     default-src https://*.example.com 'self';

3. Save and close the next.config.js file.

4. Build and deploy the renderer application.