vercel.json

{
	"rewrites": [{ "source": "/(.*)", "destination": "/index.html" }],

	"headers": [
		{
			"source": "/assets/(.*)",
			"headers": [
				{
					"key": "Cache-Control",
					"value": "public, max-age=31536000, immutable"
				}
			]
		},
		{
			"source": "/(.*)",
			"headers": [
				{
					"key": "X-Content-Type-Options",
					"value": "nosniff"
				},
				{
					"key": "X-Frame-Options",
					"value": "DENY"
				},
				{
					"key": "X-XSS-Protection",
					"value": "1; mode=block"
				},
				{
					"key": "Content-Security-Policy",
					"value": "default-src 'self'; img-src 'self' https://i.ytimg.com; style-src 'self' https: 'unsafe-inline'; script-src 'self' https: 'unsafe-inline'; frame-ancestors 'none'; frame-src https://www.youtube-nocookie.com/; upgrade-insecure-requests; base-uri 'self';"
				},
				{
					"key": "Referrer-Policy",
					"value": "strict-origin-when-cross-origin"
				},
				{
					"key": "Strict-Transport-Security",
					"value": "max-age=63072000; includeSubDomains"
				},
				{
					"key": "Permissions-Policy",
					"value": "interest-cohort=()"
				}
			]
		}
	]
}