domain hardening and security headers

[fuxingloh]

What would you like to be added:

Implement all the domain hardening and security headers for web apps.

E.g. https://github.com/DeFiCh/scan/blob/62661206c50e7ea2e4786bf0f1e3fa5392484ac3/next.config.js#L3

Why is this needed:

For security hardening

[birthdayresearch-bot]

@fuxingloh: There are no 'area' labels on this issue. Adding an appropriate label will greatly expedite the process for us. You can add as many area as you see fit. If you are unsure what to do you can ignore this!

You can add area labels by leaving a /area comment.

Details

I am a bot created to help the BirthdayResearch developers manage community feedback and contributions. You can check out my manifest file to understand my behavior and what I can do. If you want to use this for your project, you can check out the BirthdayResearch/oss-governance-bot repository.