Security Headers not Acitve

[LibenHailu]

Current Behavior

We've recently added security headers such as Content-Security-Policy (CSP) and X-Frame-Options to enhance security and to prevent Clickjacking. However, they don't appear to be active. You can verify this by scanning the URL at securityheaders.com.

Desired Situation

Our goal is to improve the rating on securityheaders to at least a B, ideally an A.

Contributor Resources and Handbook

The layer5.io website uses Gatsby, React, and GitHub Pages. Site content is found under the master branch.

• 📚 See contributing instructions.
• 🎨 Wireframes and designs for Layer5 site in Figma (open invite)
• 🙋🏾🙋🏼 Questions: Discussion Forum and Community Slack.

Join the Layer5 Community by submitting your community member form.

[LibenHailu]

@ShashaankS @saurabhraghuvanshii

[ShashaankS]

@LibenHailu https://github.com/layer5io/layer5/pull/6649 This pr fixes this issue, removing the existing security header setup as github pages don't support it. Adding a frame-busting script to stop reframing of websites.

[SplinterSword]

Is this Issue still open, I would like to work on it

[vr-varad]

Sure @SplinterSword