title: firebase hosting blocking script due to CORS issue
body: <p>I am using firebase hosting to host few scripts and trying to access them from another site. it naturally gets blocked due to CORS issues. based on my research on other forum threads etc i modified the firebase.json as below</p>
  
  <pre><code>{
    "hosting": {
      "public": "public",
      "ignore": [
        "firebase.json",
        "**/.*",
        "**/node_modules/**"
      ],
      "headers": [ {
      "source" : "**",
      "headers" : [ {
        "key" : "Access-Control-Allow-Origin",
        "value" : "*"
      } ]
    }]
  }
  }
  </code></pre>
  
  <p>which essentially allow any url to access the resources hosted here. however, on trying to run my site i still see below </p>
  
  <pre><code>        Access to XMLHttpRequest at 'https://oracle-bot-sdk.firebaseapp.com//loader.json' 
      from origin 'https://insurance-bot.moblize.it' has been blocked by CORS policy: 
  No 'Access-Control-Allow-Origin' header is present on the requested resource.
  </code></pre>
  
  <p>what else is needed?</p>