staticwebapp.config.json

{
  "$schema": "https://json.schemastore.org/staticwebapp.config.json",
  "routes": [
    {
      "route": "/*.{js,css,woff2}",
      "headers": {
        "Cache-Control": "immutable, no-transform, max-age=31536000"
      }
    },
    {
      "route": "/assets/*",
      "headers": {
        "Cache-Control": "must-revalidate, no-transform, max-age=2592000"
      }
    }
  ],
  "trailingSlash": "auto",
  "navigationFallback": {
    "rewrite": "index.html",
    "exclude": ["/assets/*"]
  },
  "responseOverrides": {
    "404": {
      "redirect": "/"
    }
  },
  "globalHeaders": {
    "Content-Security-Policy": "default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src * 'self' data:; font-src 'self' data:; connect-src * 'self'; media-src * 'self'; object-src 'none'; frame-src 'none'; form-action 'none'; manifest-src 'self'",
    "Cross-Origin-Opener-Policy": "same-origin",
    "Permissions-Policy": "document-domain=(), storage-access=(self), attribution-reporting=(), interest-cohort=(), browsing-topics=()",
    "Referrer-Policy": "same-origin"
  }
}