1<?xml version="1.0" encoding="utf-8"?> 2<appengine-web-app xmlns="http://appengine.google.com/ns/1.0"> 3 4 <threadsafe>true</threadsafe> 5 <sessions-enabled>false</sessions-enabled> 6 <runtime>java8</runtime> 7 8 <!-- Configure java.util.logging --> 9 <system-properties> 10 <property name="java.util.logging.config.file" value="WEB-INF/logging.properties"/> 11 </system-properties> 12 13 <!-- Path patterns not supported in production --> 14 <static-files> 15 <include path="/**"> 16 <http-header name="Referrer-Policy" value="strict-origin"/> 17 <http-header name="Access-Control-Allow-Origin" value="*"/> 18 <http-header name="X-XSS-Protection" value="1; mode=block"/> 19 <http-header name="X-Content-Type-Options" value="nosniff"/> 20 </include> 21 </static-files> 22 23 <instance-class>F1</instance-class> 24 <automatic-scaling> 25 <max-idle-instances>1</max-idle-instances> 26 </automatic-scaling> 27</appengine-web-app> 28