firebase.json
{
"firestore": {
"rules": "firestore.rules",
"indexes": "firestore.indexes.json"
},
"hosting": {
"public": "dist",
"headers": [
{
"source": "**/*",
"headers": [
{
"key": "Content-Security-Policy",
"value": "default-src 'self' pomodoro-b3526.firebaseapp.com *.google.com *.googleapis.com *.gstatic.com sentry.io plausible.io; style-src 'self' 'unsafe-inline' *.googleapis.com; frame-ancestors 'none'"
},
{
"key": "Strict-Transport-Security",
"value": "max-age=63072000; includeSubDomains; preload"
},
{
"key": "X-Frame-Options",
"value": "DENY"
}
]
}
]
}
}