ithc changes and uat fixes

next.config.js

@@ -17,7 +17,36 @@ module.exports = withStyles({
         },
     },
 });
+
+const securityHeaders = [
+    {
+        key: "X-DNS-Prefetch-Control",
+        value: "on",
+    },
+    {
+        key: "X-Frame-Options",
+        value: "SAMEORIGIN",
+    },
+    {
+        key: "Strict-Transport-Security",
+        value: "max-age=63072000; includeSubDomains; preload",
+    },
+    {
+        key: "Content-Security-Policy",
+        value: "frame-src 'self'; child-src 'self'",
+    },
+];
+
 module.exports = {
+    async headers() {
+        return [
+            {
+                // Apply these headers to all routes in your application.
+                source: "/(.*)",
+                headers: securityHeaders,
+            },
+        ];
+    },
     generateBuildId: async () => {
         // You can, for example, get the latest git commit hash here
         return "pinswg-build-id";