fix: middleware.ts

apps/next/next.config.mjs

@@ -1,5 +1,6 @@
 import { createMDX } from "fumadocs-mdx/next";
 import MonacoWebpackPlugin from "monaco-editor-webpack-plugin";
+
 const withMDX = createMDX();
 
 /** @type {import('next').NextConfig} */
@@ -28,6 +29,23 @@ const config = {
     }
     return config;
   },
+  async headers() {
+    return [
+      {
+        source: "/:path*",
+        headers: [
+          {
+            key: "Cross-Origin-Opener-Policy",
+            value: "same-origin",
+          },
+          {
+            key: "Cross-Origin-Embedder-Policy",
+            value: "credentialless",
+          },
+        ],
+      },
+    ];
+  },
 };
 
 export default withMDX(config);

apps/next/src/middleware.ts

@@ -0,0 +1,13 @@
+import type { NextRequest } from "next/server";
+import { NextResponse } from "next/server";
+
+export function middleware(_: NextRequest): NextResponse {
+  const response = NextResponse.next();
+  response.headers.set("Cross-Origin-Resource-Policy", "cross-origin");
+  return response;
+}
+
+export const config = {
+  matcher:
+    "/((?!api|_next/static|_next/image|favicon.ico|sitemap.xml|robots.txt).*)",
+};