Merge pull request #736 from abhishekojha06/abhishekojha

Improved firebase configuration by adding security headers(#735)
hotwax · Dec 6, 2024 · f88b709 · f88b709
2 parents 70827e4 + 6e251d3
commit f88b709
Showing 1 changed file with 19 additions and 1 deletion.
diff --git a/firebase.json b/firebase.json
@@ -25,7 +25,25 @@
           "rewrites": [ {
             "source": "**",
             "destination": "/index.html"
-          }]
+            } ],
+            "headers": [ {
+              "source": "**",
+              "headers": [ {
+                "key": "X-Frame-Options",
+                "value": "SAMEORIGIN"
+              },
+              {
+                "key": "Content-Security-Policy",
+                "value": "default-src 'self';font-src 'self' data: *;script-src 'self' 'unsafe-inline' 'unsafe-eval' fonts.googleapis.com;img-src 'self' 'unsafe-inline' *.shopify.com javascript: ;style-src 'self' 'unsafe-inline' *; connect-src 'self' *"
+              },
+              {
+                "key": "strict-transport-security",
+                "value": "max-age=31536000; includeSubDomains"
+              },{
+                "key": "Permissions-Policy",
+                "value": "camera=self"
+              } ]
+            }]
         },
         {
           "target": "uat",