It’s not the cleanest solution and doesn’t account for the Strict-Transport-Security you’ve specified in your static.json though so it may not work for this particular project…but, if anyone else is experiencing a similar issue and wants to use Glitch the fastest workaround without having to completely delete package.json would be to update the start script in package.json.
"start": "ws --port 3000 --directory ./www --forbid '/.env' --forbid '/.data' --log-format combined",