1<?xml version="1.0" encoding="utf-8"?>
2<appengine-web-app xmlns="http://appengine.google.com/ns/1.0">
3
4  <threadsafe>true</threadsafe>
5  <sessions-enabled>false</sessions-enabled>
6  <runtime>java8</runtime>
7
8  <!-- Configure java.util.logging -->
9  <system-properties>
10    <property name="java.util.logging.config.file" value="WEB-INF/logging.properties"/>
11  </system-properties>
12
13  <!-- Path patterns not supported in production -->
14  <static-files>
15    <include path="/**">
16      <http-header name="Referrer-Policy" value="strict-origin"/>
17	  <http-header name="Access-Control-Allow-Origin" value="*"/>
18	  <http-header name="X-XSS-Protection" value="1; mode=block"/>
19	  <http-header name="X-Content-Type-Options" value="nosniff"/>
20	</include>
21  </static-files>
22
23  <instance-class>F1</instance-class>
24  <automatic-scaling>
25    <max-idle-instances>1</max-idle-instances>
26  </automatic-scaling>
27</appengine-web-app>
28