firebase.json

{
  "hosting": {
    "public": "public",
    "ignore": [
      "firebase.json",
      "**/.*",
      "**/node_modules/**",
      "index.unminified.html",
      "README.md",
      ".gitignore",
      "assets/css/*.scss",
      "assets/js/script.js"
    ],
    "cleanUrls": true,
    "headers": [{
      "source": "**/*.@(jpg|jpeg|gif|png|webp|svg|js|css)",
      "headers": [{
        "key": "Cache-Control",
        "value": "max-age=86400"
      }, {
        "key": "X-Content-Type-Options",
        "value": "nosniff"
      }]
    }, {
      "source": "404.html",
      "headers": [{
        "key": "Cache-Control",
        "value": "max-age=8640"
      }]
    }, {
      "source": "*",
      "headers": [{
        "key": "X-Content-Type-Options",
        "value": "nosniff"
      }, {
        "key": "X-Frame-Options",
        "value": "DENY"
      }, {
        "key": "X-XSS-Protection",
        "value": "1; mode=block"
      }]
    }]
  }
}