Skip to content

Commit a5e2121

Browse files
Fix CSP to allow wallet connections - add RPC endpoints and wallet providers
Security measures were blocking wallet connections due to missing CSP connect-src directives for wallet RPC endpoints and provider domains. Fixed: - Added Base RPC endpoints (Base Sepolia and Base Mainnet) - Added wallet provider domains (MetaMask, WalletConnect, Coinbase, Rainbow, Uniswap) - Added WebSocket connections for WalletConnect This fixes: - Wallet connection prompts not appearing - Transaction prompts not showing - Wallet provider connections being blocked by CSP Bot protection verified - only affects API routes, not wallet connections. Transaction modal z-index verified - higher than RainbowKit (9999 vs 1100). Farcaster network switching verified - shows instructions correctly.
1 parent 466418e commit a5e2121

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

next.config.ts

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -118,7 +118,7 @@ const nextConfig: NextConfig = {
118118
"style-src 'self' 'unsafe-inline'",
119119
"img-src 'self' data: https: blob:",
120120
"font-src 'self' data:",
121-
"connect-src 'self' https://api.neynar.com https://api.airstack.xyz https://gateway.pinata.cloud https://ipfs.io https://cloudflare-ipfs.com https://dweb.link wss:",
121+
"connect-src 'self' https://api.neynar.com https://api.airstack.xyz https://gateway.pinata.cloud https://ipfs.io https://cloudflare-ipfs.com https://dweb.link https://mainnet.base.org https://sepolia.base.org https://base-mainnet.g.alchemy.com https://base-sepolia.g.alchemy.com https://base-mainnet.infura.io https://base-sepolia.infura.io https://*.walletconnect.com https://*.walletconnect.org https://*.metamask.io https://*.coinbase.com https://*.coinbasewallet.com https://*.rainbow.me https://*.uniswap.org wss: wss://*.walletconnect.com wss://*.walletconnect.org",
122122
"frame-src 'self'",
123123
"frame-ancestors https://warpcast.com https://client.warpcast.com https://farcaster.xyz https://client.farcaster.xyz https://app.farcaster.xyz https://www.farcaster.xyz https://www.warpcast.com https://app.warpcast.com https://base.org https://www.base.org https://base.dev https://www.base.dev https://app.base.org https://app.base.dev",
124124
"object-src 'none'",

0 commit comments

Comments
 (0)