firebase.json

{
  "hosting": {
    "public": "dist/translation",
    "ignore": [
      "firebase.json",
      "**/.*",
      "**/node_modules/**"
    ],
    "rewrites": [
      {
        "source": "**",
        "destination": "/index.html"
      }
    ],
    "headers": [
      {
        "source": "**",
        "headers": [
          {
            "key": "Content-Security-Policy",
            "value": "default-src 'self'; script-src 'unsafe-inline' 'self' blob: data: https://securetoken.googleapis.com https://www.gstatic.com https://www.googleapis.com https://trusted.cdn.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' blob: data: https://www.google.com; font-src 'self' https://fonts.gstatic.com; connect-src 'self' data: https://westeurope.api.cognitive.microsoft.com wss://westeurope.tts.speech.microsoft.com wss://westeurope.stt.speech.microsoft.com https://firestore.googleapis.com https://securetoken.googleapis.com https://www.googleapis.com https://identitytoolkit.googleapis.com https://fonts.gstatic.com {{BACKEND_GATEWAY}}; frame-ancestors 'none'; base-uri 'self'; media-src 'self' blob: https://www.youtube.com;"
          },
          {
            "key": "X-Frame-Options",
            "value": "DENY"
          },
          {
            "key": "X-Content-Type-Options",
            "value": "nosniff"
          },
          {
            "key": "Referrer-Policy",
            "value": "strict-origin-when-cross-origin"
          },
          {
            "key": "Permissions-Policy",
            "value": "geolocation=(), microphone=(self), camera=()"
          },
          {
            "key": "Cache-Control",
            "value": "no-cache, no-store, must-revalidate"
          },
          {
            "key": "Pragma",
            "value": "no-cache"
          },
          {
            "key": "Expires",
            "value": "0"
          }
        ]
      }
    ]
  }
}