https-jrtorres042-github-com
/
git_microsoft-powershell-achived_credential-tracker_data-google.chrome_covid-19_web-dev_diff-1
Public template
forked from GoogleChrome/web.dev
-
Notifications
You must be signed in to change notification settings - Fork 0
/
firebase-config.js
39 lines (36 loc) · 1.28 KB
/
firebase-config.js
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
const yaml = require('js-yaml');
const fs = require('fs');
const redirectsYaml = fs.readFileSync('./redirects.yaml', 'utf8');
const {redirects: parsedRedirects} = yaml.safeLoad(redirectsYaml);
const firebaseJson = require('./firebase.incl.json');
firebaseJson.hosting.redirects = parsedRedirects.reduce(
(redirects, redirect) => {
const type = [301, 302].includes(redirect.type) ? redirect.type : 301;
if (redirect.source && redirect.destination) {
redirects.push({
source: redirect.source,
destination: redirect.destination,
type,
});
}
return redirects;
},
[],
);
if (process.env.ELEVENTY_ENV === 'prod') {
const hashListJson = fs.readFileSync('dist/script-hash-list.json', 'utf-8');
const hashList = JSON.parse(hashListJson);
firebaseJson.hosting.headers[0].headers.push({
key: 'Content-Security-Policy',
value:
`script-src 'strict-dynamic' ${hashList.join(' ')} ` +
`'unsafe-inline' http: https:; object-src 'none'; base-uri 'self'; ` +
`frame-ancestors 'self'; ` +
`report-uri https://csp.withgoogle.com/csp/webdev`,
});
firebaseJson.hosting.headers[0].headers.push({
key: 'X-Frame-Options',
value: 'SAMEORIGIN',
});
}
fs.writeFileSync('./firebase.json', JSON.stringify(firebaseJson, null, 2));