firebase.json

{
  "firestore": {
    "rules": "firestore.rules",
    "indexes": "firestore.indexes.json"
  },
  "functions": {
    "predeploy": [
      "npm --prefix \"$RESOURCE_DIR\" run lint",
      "npm --prefix \"$RESOURCE_DIR\" run build"
    ],
    "source": "functions"
  },
  "hosting": {
    "public": "dist",
    "rewrites": [
      {
        "source": "**",
        "destination": "/index.html"
      }
    ],
    "headers": [
      {
        "source": "**",
        "headers": [
          {
            "key": "Content-Security-Policy-Report-Only",
            "value": "child-src docs.google.com; connect-src 'self' firestore.googleapis.com www.google-analytics.com stats.g.doubleclick.net; img-src 'self' www.google-analytics.com www.google.com stats.g.doubleclick.net; default-src 'self' firestore.googleapis.com www.google-analytics.com stats.g.doubleclick.net; style-src 'self' 'unsafe-inline' 'unsafe-eval'; worker-src 'self'; manifest-src 'self'; script-src 'self' storage.googleapis.com www.google-analytics.com 'unsafe-inline' 'unsafe-eval'; font-src 'self'; frame-src docs.google.com; report-uri https://davidkassa.report-uri.com/r/d/csp/wizard;"
          },
          {
            "key": "Report-To",
            "value": "{'group':'default','max_age':31536000,'endpoints':[{'url':'https://davidkassa.report-uri.com/a/d/g'}],'include_subdomains':true}"
          },
          {
            "key": "NEL",
            "value": "{'report_to':'default','max_age':31536000,'include_subdomains':true}"
          },
          {
            "key": "Referrer-Policy",
            "value": "strict-origin-when-cross-origin"
          },
          {
            "key": "X-Content-Type-Options",
            "value": "nosniff"
          },
          {
            "key": "X-Frame-Options",
            "value": "DENY"
          },
          {
            "key": "X-XSS-Protection",
            "value": "1; mode=block"
          }
        ]
      }
    ],
    "ignore": ["firebase.json", "**/.*", "**/node_modules/**"]
  }
}