From be0a18665de965658e040e4ad5c59eb71c50fbc3 Mon Sep 17 00:00:00 2001
From: MihaiAndrei98 <69770699+MihaiAndrei98@users.noreply.github.com>
Date: Sun, 20 Sep 2026 21:50:02 +0300
Subject: [PATCH 1/2] fix: include the 'Strict-Transport-Security' header to
 ensure all communications will be sent over HTTPS'

---
 packages/wallet/frontend/next.config.js    | 4 ++++
 packages/wallet/frontend/src/middleware.ts | 4 ++++
 2 files changed, 8 insertions(+)

diff --git a/packages/wallet/frontend/next.config.js b/packages/wallet/frontend/next.config.js
index 6fdd5b811..b84ad8059 100644
--- a/packages/wallet/frontend/next.config.js
+++ b/packages/wallet/frontend/next.config.js
@@ -41,6 +41,10 @@ const nextConfig = {
           {
             key: 'Content-Security-Policy',
             value: "frame-ancestors 'none';"
+          },
+          {
+            key: 'Strict-Transport-Security',
+            value:'max-age=31536000; includeSubDomains'
           }
         ]
       }
diff --git a/packages/wallet/frontend/src/middleware.ts b/packages/wallet/frontend/src/middleware.ts
index d3e5c618e..5a6e438b1 100644
--- a/packages/wallet/frontend/src/middleware.ts
+++ b/packages/wallet/frontend/src/middleware.ts
@@ -15,6 +15,10 @@ const publicPaths = ['/auth*']
 function withFrameProtection(response: NextResponse): NextResponse {
   response.headers.set('X-Frame-Options', 'DENY')
   response.headers.set('Content-Security-Policy', "frame-ancestors 'none';")
+  response.headers.set(
+    'Strict-Transport-Security',
+    'max-age=31536000; includeSubDomains'
+  )
   return response
 }
 

From 121df8268bb9b77a9a91525b72ab8242f2b54a40 Mon Sep 17 00:00:00 2001
From: MihaiAndrei98 <69770699+MihaiAndrei98@users.noreply.github.com>
Date: Mon, 21 Sep 2026 09:31:49 +0300
Subject: [PATCH 2/2] fix:Format

---
 packages/wallet/frontend/next.config.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/packages/wallet/frontend/next.config.js b/packages/wallet/frontend/next.config.js
index b84ad8059..f6d1a363d 100644
--- a/packages/wallet/frontend/next.config.js
+++ b/packages/wallet/frontend/next.config.js
@@ -44,7 +44,7 @@ const nextConfig = {
           },
           {
             key: 'Strict-Transport-Security',
-            value:'max-age=31536000; includeSubDomains'
+            value: 'max-age=31536000; includeSubDomains'
           }
         ]
       }