I'm trying to publish a Firebase app to Shopify but they are requiring the Content-Security-Policy header to be set to frame-ancestors https://<CURRENT_DOMAIN>.myshopify.com https://admin.shopify.com;
AFAIK Firebase Hosting doesn't allow to specify dynamic headers, and in my case I would need to use the shop HTTP parameter to populate my header.
Is there a way to use a Cloud Function to act as proxy and set the correct headers? May someone provide an example?