From 4e5be1ee00af5c015d73207c01127b4d01a385ab Mon Sep 17 00:00:00 2001 From: martines3000 Date: Wed, 27 Nov 2024 13:52:26 +0100 Subject: [PATCH] chore: add some missing domains to csp --- apps/frontend/next.config.js | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/apps/frontend/next.config.js b/apps/frontend/next.config.js index a7785c1f..32f328a5 100644 --- a/apps/frontend/next.config.js +++ b/apps/frontend/next.config.js @@ -12,8 +12,10 @@ const CONNECT_DOMAINS = [ 'https://mainnet.fuel.network', // Outside domains 'https://api.web3modal.org', - 'https://api.bako.global', 'wss://relay.walletconnect.com', + 'https://verify.walletconnect.com/', + 'https://api.bako.global', + 'wss://api.bako.global', // PostHog 'https://eu.i.posthog.com', // Sentio @@ -31,7 +33,7 @@ const CSP_HEADER = ` script-src 'self' 'unsafe-eval' 'unsafe-inline' https://vercel.live https://static.swaylend.com https://testnet-swaylend.b-cdn.net; style-src 'self' 'unsafe-inline' https://static.swaylend.com https://testnet-swaylend.b-cdn.net https://fonts.googleapis.com; img-src 'self' blob: data: https://static.swaylend.com https://testnet-swaylend.b-cdn.net; - font-src 'self' https://fonts.googleapis.com https://static.swaylend.com https://testnet-swaylend.b-cdn.net; + font-src 'self' https://fonts.googleapis.com https://fonts.gstatic.com https://static.swaylend.com https://testnet-swaylend.b-cdn.net; object-src 'none'; base-uri 'self'; form-action 'self';