update headers

Author: AlexErrant

app-ugc/buildHeaders.ts

@@ -2,6 +2,9 @@ import { hstsName, hstsValue } from 'shared'
 import * as fs from 'fs'
 
 const contents = `/*
+  Cross-Origin-Embedder-Policy: require-corp
+  Cross-Origin-Opener-Policy: same-origin
+  Cross-Origin-Resource-Policy: cross-origin
   ${hstsName}: ${hstsValue}`
 
 fs.writeFile('./dist/_headers', contents, (err) => {

app-ugc/vite.config.ts

@@ -41,6 +41,22 @@ export default defineConfig(({ mode }) => {
 		key = fs.readFileSync(keyPath)
 		cert = fs.readFileSync(certPath)
 	}
+	const serverOptions = {
+		headers: {
+			// eslint-disable-next-line @typescript-eslint/naming-convention
+			'Cross-Origin-Opener-Policy': 'same-origin',
+			// eslint-disable-next-line @typescript-eslint/naming-convention
+			'Cross-Origin-Embedder-Policy': 'require-corp',
+			// eslint-disable-next-line @typescript-eslint/naming-convention
+			'Cross-Origin-Resource-Policy': 'cross-origin',
+		},
+		port: 3015,
+		strictPort: true,
+		https: {
+			key,
+			cert,
+		},
+	}
 	return {
 		plugins: [
 			// if we ever move off this plugin https://github.com/vitejs/vite/issues/2248
@@ -61,21 +77,7 @@ export default defineConfig(({ mode }) => {
 			}),
 		],
 		build,
-		server: {
-			port: 3015,
-			strictPort: true,
-			https: {
-				key,
-				cert,
-			},
-		},
-		preview: {
-			port: 3015,
-			strictPort: true,
-			https: {
-				key,
-				cert,
-			},
-		},
+		server: serverOptions,
+		preview: serverOptions,
 	}
 })

hub-ugc/buildHeaders.ts

@@ -2,6 +2,9 @@ import { hstsName, hstsValue } from 'shared'
 import * as fs from 'fs'
 
 const contents = `/*
+  Cross-Origin-Embedder-Policy: require-corp
+  Cross-Origin-Opener-Policy: same-origin
+  Cross-Origin-Resource-Policy: cross-origin
   ${hstsName}: ${hstsValue}`
 
 fs.writeFile('./dist/_headers', contents, (err) => {

hub-ugc/vite.config.ts

@@ -42,6 +42,22 @@ export default defineConfig(({ mode }) => {
 		key = fs.readFileSync(keyPath)
 		cert = fs.readFileSync(certPath)
 	}
+	const serverOptions = {
+		headers: {
+			// eslint-disable-next-line @typescript-eslint/naming-convention
+			'Cross-Origin-Opener-Policy': 'same-origin',
+			// eslint-disable-next-line @typescript-eslint/naming-convention
+			'Cross-Origin-Embedder-Policy': 'require-corp',
+			// eslint-disable-next-line @typescript-eslint/naming-convention
+			'Cross-Origin-Resource-Policy': 'cross-origin',
+		},
+		port: 3016,
+		strictPort: true,
+		https: {
+			key,
+			cert,
+		},
+	}
 	return {
 		plugins: [
 			solidPlugin(),
@@ -63,21 +79,7 @@ export default defineConfig(({ mode }) => {
 			}),
 		],
 		build,
-		server: {
-			port: 3016,
-			strictPort: true,
-			https: {
-				key,
-				cert,
-			},
-		},
-		preview: {
-			port: 3016,
-			strictPort: true,
-			https: {
-				key,
-				cert,
-			},
-		},
+		server: serverOptions,
+		preview: serverOptions,
 	}
 })