headers

middleware.ts

@@ -8,6 +8,14 @@ export function middleware(request: NextRequest) {
   // Create response with headers
   const response = NextResponse.next({ headers });
   
+  // Add SEO and security headers
+  // Only set X-Frame-Options for non-HF spaces domains
+  if (!request.nextUrl.host.includes('hf.space')) {
+    response.headers.set('X-Frame-Options', 'SAMEORIGIN');
+  }
+  response.headers.set('X-Content-Type-Options', 'nosniff');
+  response.headers.set('Referrer-Policy', 'strict-origin-when-cross-origin');
+  
   // Add cache control for better performance
   if (request.nextUrl.pathname.startsWith('/_next/static')) {
     response.headers.set('Cache-Control', 'public, max-age=31536000, immutable');