static.json

{
    "headers": {
      "/**": {
        "Content-Security-Policy": "default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; font-src 'self' data:; connect-src 'self' https://*.okta.com;",
        "Referrer-Policy": "no-referrer, strict-origin-when-cross-origin",
        "Strict-Transport-Security": "max-age=63072000; includeSubDomains",
        "X-Content-Type-Options": "nosniff",
        "X-Frame-Options": "DENY",
        "X-XSS-Protection": "1; mode=block",
        "Feature-Policy": "accelerometer 'none'; camera 'none'; microphone 'none'"
      }
    },
    "https_only": true,
    "root": "build/",
    "routes": {
      "/**": "index.html"
    }
  }