fix: disallow iframs

next.config.js

@@ -14,6 +14,15 @@ const nextConfig = {
     },
   }),
 
+  async headers() {
+    return [
+      {
+        source: '/(.*)?',
+        headers: [{ key: 'X-Frame-Options', value: 'DENY' }],
+      },
+    ];
+  },
+
   distDir: 'dist/website',
   reactStrictMode: false,
 };