firebase.json

{
  "firestore": {
    "rules": "firestore.rules",
    "indexes": "firestore.indexes.json"
  },
  "hosting": {
    "public": "build",
    "headers": [
      {
        "source": "**/*",
        "headers": [
          {
            "key": "Access-Control-Allow-Origin",
            "value": "https://pomodoro.code2d.org"
          },
          {
            "key": "Content-Security-Policy",
            "value": "default-src 'self' *.google.com *.googleapis.com *.gstatic.com sentry.io; style-src 'self' 'unsafe-inline' *.googleapis.com; frame-ancestors 'none'"
          },
          {
            "key": "Strict-Transport-Security",
            "value": "max-age=63072000; includeSubDomains; preload"
          },
          {
            "key": "X-Frame-Options",
            "value": "DENY"
          }
        ]
      }
    ]
  }
}