add X-Frame-Options DENY

scholtz · Mar 14, 2024 · bb1ce29 · bb1ce29
1 parent 08b9cb4
commit bb1ce29
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 4 deletions.
diff --git a/docker/Dockerfile b/docker/Dockerfile
@@ -1,14 +1,16 @@
 FROM node:20 AS build
 ENV DEBIAN_FRONTEND noninteractive
-RUN apt update && apt dist-upgrade -y && apt-get autoremove --yes && rm -rf /var/lib/{apt,dpkg,cache,log}/
-RUN npm install -g npm@latest
+RUN apt update \
+  && apt dist-upgrade -y \
+  && apt-get clean autoclean \
+  && apt-get autoremove --yes \
+  && rm -rf /var/lib/{apt,dpkg,cache,log}/ \
+  && npm install -g npm@latest
 WORKDIR /src
 COPY package-lock.json package-lock.json
 COPY package.json package.json
 RUN npm ci
 COPY . .
-RUN npm ci
-#RUN npm audit fix --save &>/dev/null
 RUN npm run build
 RUN cd /src/dist && ls
 #RUN npm run test

diff --git a/docker/default.conf b/docker/default.conf
@@ -5,6 +5,8 @@ server {
     access_log /dev/stdout;
     error_log /dev/stderr;
 
+    add_header X-Frame-Options DENY always;
+
     location ~* \.(manifest|html|xml|json)$ {
         root   /app;
         index  index.html;