{ "hosting": { "public": "public", "ignore": [ "firebase.json", "package.json", "package-lock.json", "Gruntfile.js", "README.md", "**/.*", "**/.git/**", "**/node_modules/**", "**/bower_components/**" ], "headers": [ { "source": "**", "headers": [ { "key": "X-Content-Type-Options", "value": "nosniff" }, { "key": "X-XSS-Protection", "value": "1; mode=block; report=https://jakejarvis.report-uri.com/r/d/xss/enforce" }, { "key": "X-Frame-Options", "value": "SAMEORIGIN" }, { "key": "X-DNS-Prefetch-Control", "value": "off" }, { "key": "Referrer-Policy", "value": "no-referrer-when-downgrade" }, { "key": "Content-Security-Policy", "value": "default-src 'self'; script-src 'self' www.google-analytics.com ssl.google-analytics.com ajax.googleapis.com 'sha256-KhRmfxEAAaZsUM+7gtG8pxaii136UceZCbgie95aRd0=' 'sha256-C84Lc+r0cDvAfbbr1KHi0s1jt0nzfAWH5+bmB/2Ph8s='; style-src 'self' 'unsafe-inline' fonts.googleapis.com; img-src 'self' data: https:; font-src 'self' fonts.gstatic.com; frame-src 'self' www.youtube.com player.vimeo.com drive.google.com www.scribd.com; connect-src 'self' jakejarvis.report-uri.com www.google-analytics.com ssl.google-analytics.com; upgrade-insecure-requests; report-uri https://jakejarvis.report-uri.com/r/d/csp/enforce;" }, { "key": "Expect-CT", "value": "max-age=0, report-uri=https://jakejarvis.report-uri.com/r/d/ct/reportOnly" } ] }, { "source" : "**/", "headers": [ { "key": "Cache-Control", "value": "max-age=3600" }, { "key": "X-UA-Compatible", "value": "IE=edge" } ] }, { "source" : "**/*.@(jpg|jpeg|gif|png|ico)", "headers" : [{ "key" : "Cache-Control", "value" : "max-age=604800" }] }, { "source" : "**/*.@(css|js)", "headers" : [{ "key" : "Cache-Control", "value" : "max-age=86400" }] }, { "source" : "**/*.@(ttf|otf|woff|woff2|svg|eot)", "headers" : [{ "key" : "Cache-Control", "value" : "max-age=2628000" }] }, { "source" : "404.html", "headers" : [{ "key" : "Cache-Control", "value" : "max-age=3600" }] } ] } }