From 7650666e105cc59629d9f60c9bc6ca6b2501d340 Mon Sep 17 00:00:00 2001 From: Jacob Shufro Date: Thu, 9 Oct 2025 13:29:55 -0400 Subject: [PATCH 1/3] Add firefox metamask extension to csp script-src --- scripts/src/gen_headers.ts | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/scripts/src/gen_headers.ts b/scripts/src/gen_headers.ts index 5838835..4379f20 100644 --- a/scripts/src/gen_headers.ts +++ b/scripts/src/gen_headers.ts @@ -9,7 +9,7 @@ const tmpl: string = `/* X-content-Type-Options: nosniff Permissions-Policy: microphone=(), camera=(), accelerometer=(), autoplay=(), display-capture=(), encrypted-media=(), fullscreen=(), geolocation=(), gyroscope=(), magnetometer=(), midi=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(self), usb=(), xr-spatial-tracking=() X-XSS-Protection: 1; mode=block - Content-Security-Policy: default-src 'none'; script-src 'self' 'sha256-NzvNrqk5jB9YZATwo5BF4JoRlJ02HsnFikbKXgEPdaQ='; img-src 'self' data: blob: https://explorer-api.walletconnect.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; manifest-src 'self'; connect-src 'self' wss://*.walletconnect.com https://*.walletconnect.com wss://*.walletconnect.org https://*.walletconnect.org https://*.web3modal.org wss://*.web3modal.org https://api.rescuenode.com https://cloudflare-eth.com https://cca-lite.coinbase.com; frame-ancestors 'self'; base-uri 'none'; form-action 'self'; upgrade-insecure-requests; report-uri https://rescuenode.com/csp-report; frame-src https://verify.walletconnect.com https://verify.walletconnect.org; + Content-Security-Policy: default-src 'none'; script-src 'self' 'sha256-NzvNrqk5jB9YZATwo5BF4JoRlJ02HsnFikbKXgEPdaQ=' moz-extension://d0227680-f61a-4d50-863d-58efec07732f; img-src 'self' data: blob: https://explorer-api.walletconnect.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; manifest-src 'self'; connect-src 'self' wss://*.walletconnect.com https://*.walletconnect.com wss://*.walletconnect.org https://*.walletconnect.org https://*.web3modal.org wss://*.web3modal.org https://api.rescuenode.com https://cloudflare-eth.com https://cca-lite.coinbase.com; frame-ancestors 'self'; base-uri 'none'; form-action 'self'; upgrade-insecure-requests; report-uri https://rescuenode.com/csp-report; frame-src https://verify.walletconnect.com https://verify.walletconnect.org; X-Robots-Tag: noindex /docs/* From f042fd6f29649cd464fc6f00f4dc72581b17df66 Mon Sep 17 00:00:00 2001 From: Jacob Shufro Date: Thu, 9 Oct 2025 14:11:42 -0400 Subject: [PATCH 2/3] Revert "Add firefox metamask extension to csp script-src" This reverts commit 7650666e105cc59629d9f60c9bc6ca6b2501d340. --- scripts/src/gen_headers.ts | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/scripts/src/gen_headers.ts b/scripts/src/gen_headers.ts index 4379f20..5838835 100644 --- a/scripts/src/gen_headers.ts +++ b/scripts/src/gen_headers.ts @@ -9,7 +9,7 @@ const tmpl: string = `/* X-content-Type-Options: nosniff Permissions-Policy: microphone=(), camera=(), accelerometer=(), autoplay=(), display-capture=(), encrypted-media=(), fullscreen=(), geolocation=(), gyroscope=(), magnetometer=(), midi=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(self), usb=(), xr-spatial-tracking=() X-XSS-Protection: 1; mode=block - Content-Security-Policy: default-src 'none'; script-src 'self' 'sha256-NzvNrqk5jB9YZATwo5BF4JoRlJ02HsnFikbKXgEPdaQ=' moz-extension://d0227680-f61a-4d50-863d-58efec07732f; img-src 'self' data: blob: https://explorer-api.walletconnect.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; manifest-src 'self'; connect-src 'self' wss://*.walletconnect.com https://*.walletconnect.com wss://*.walletconnect.org https://*.walletconnect.org https://*.web3modal.org wss://*.web3modal.org https://api.rescuenode.com https://cloudflare-eth.com https://cca-lite.coinbase.com; frame-ancestors 'self'; base-uri 'none'; form-action 'self'; upgrade-insecure-requests; report-uri https://rescuenode.com/csp-report; frame-src https://verify.walletconnect.com https://verify.walletconnect.org; + Content-Security-Policy: default-src 'none'; script-src 'self' 'sha256-NzvNrqk5jB9YZATwo5BF4JoRlJ02HsnFikbKXgEPdaQ='; img-src 'self' data: blob: https://explorer-api.walletconnect.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; manifest-src 'self'; connect-src 'self' wss://*.walletconnect.com https://*.walletconnect.com wss://*.walletconnect.org https://*.walletconnect.org https://*.web3modal.org wss://*.web3modal.org https://api.rescuenode.com https://cloudflare-eth.com https://cca-lite.coinbase.com; frame-ancestors 'self'; base-uri 'none'; form-action 'self'; upgrade-insecure-requests; report-uri https://rescuenode.com/csp-report; frame-src https://verify.walletconnect.com https://verify.walletconnect.org; X-Robots-Tag: noindex /docs/* From 96796516cc5235b587a508986ec8b2639ed7ed97 Mon Sep 17 00:00:00 2001 From: Jacob Shufro Date: Thu, 9 Oct 2025 14:20:06 -0400 Subject: [PATCH 3/3] Add firefox blurb --- src/components/SoloNodeRequestAccess.tsx | 10 +++++++++- 1 file changed, 9 insertions(+), 1 deletion(-) diff --git a/src/components/SoloNodeRequestAccess.tsx b/src/components/SoloNodeRequestAccess.tsx index cb231ab..956572f 100644 --- a/src/components/SoloNodeRequestAccess.tsx +++ b/src/components/SoloNodeRequestAccess.tsx @@ -137,7 +137,15 @@ export default function SoloNodeRequestAccess({ <> Connect your wallet so you can be prompted to sign the - message. + message. Note that there is a{" "} + + known issue + {" "} + with Firefox Metamask.