Csp (#12)

* wip csp

* initial csp

* include alchemy and gfonts

* add walletconnect relay to csp

* more WC fixes

* cache node modules for faster CI

* Revert "Merge branch 'main' into csp"

This reverts commit 6904644, reversing
changes made to c700129.

* Update _headers

* Update playwright.yml

* Update test.yml

* fix e2e

* main

* add safe to frame ancestors

* typo

* added missing origins

* add manifest

* add CB wallet CSP

* add walletlink wss

* add icons

* add walletconnect

* add org too

* remove claim domain

* remove csp policies

* fix

* disallow unsafe-inline

* add https://fonts.googleapis.com

---------

Co-authored-by: sugh01 <[email protected]>

Author: talentlessguy

.github/workflows/playwright.yml

@@ -19,10 +19,14 @@ jobs:
       - name: Checkout code
         uses: actions/checkout@v4
 
+      - name: Install pnpm
+        uses: pnpm/action-setup@v4
+
       - name: Setup Node
         uses: actions/setup-node@v4
         with:
           node-version: lts/*
+          cache: 'pnpm'
 
       - name: Install pnpm
         run: npm install -g pnpm
@@ -34,7 +38,7 @@ jobs:
         run: cd apps/web && pnpm exec playwright install --with-deps
 
       - name: Install wait-on
-        run: npm install -g wait-on
+        run: pnpm install -g wait-on
 
       - name: Start web application and wait
         run: |

.github/workflows/test.yml

@@ -24,13 +24,14 @@ jobs:
       - name: Checkout code
         uses: actions/checkout@v4
 
+      - name: Install pnpm
+        uses: pnpm/action-setup@v4
+
       - name: Setup Node
         uses: actions/setup-node@v4
         with:
           node-version: lts/*
-
-      - name: Install pnpm
-        run: npm install -g pnpm
+          cache: 'pnpm'
 
       - name: Install dependencies
         run: pnpm install

apps/web/playwright/fixtures/accounts.ts

@@ -78,4 +78,4 @@ export const createAccounts = () => {
       return privateKeys[index]
     },
   }
-}
+}

apps/web/playwright/fixtures/index.ts

@@ -27,14 +27,14 @@ const tenderly = defineChain({
   rpcUrls: {
     default: {
       http: [
-        'https://virtual.mainnet.rpc.tenderly.co/c7a54a5e-d744-45e1-a98d-1b814b81d93d',
+        'https://virtual.mainnet.rpc.tenderly.co/42ae08fb-9b54-410b-8c4a-e9ad3334b8ee',
       ],
     },
   },
   blockExplorers: {
     default: {
       name: 'Explorer',
-      url: 'https://virtual.mainnet.rpc.tenderly.co/c7a54a5e-d744-45e1-a98d-1b814b81d93d',
+      url: 'https://virtual.mainnet.rpc.tenderly.co/42ae08fb-9b54-410b-8c4a-e9ad3334b8ee',
     },
   },
   contracts: {

apps/web/public/_headers

@@ -0,0 +1,2 @@
+/*
+  Content-Security-Policy: default-src 'self' https://delegate.ens.domains https://*.multi-delegate.pages.dev https://multi-delegate.pages.dev; script-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com https://fonts.googleapis.com; object-src 'none'; frame-src 'self' https://verify.walletconnect.com https://verify.walletconnect.org; frame-ancestors 'self' https://app.safe.global; connect-src 'self' *; img-src 'self' data: blob: *;

apps/web/public/manifest.json

@@ -0,0 +1,15 @@
+{
+  "name": "ENS Multi-Delegate App",
+  "short_name": "ENS Multi-Delegate",
+  "theme_color": "#5298FF",
+  "background_color": "#F6F6F6",
+  "display": "standalone",
+  "description": "ENS Multi-Delegate App",
+  "icons": [
+    {
+      "src": "https://ens.domains/favicon.png",
+      "sizes": "64x64 32x32 24x24 16x16", 
+      "type": "image/png"
+    }
+  ]
+}

apps/web/tests/manageStrategy.spec.ts

@@ -39,4 +39,4 @@ test('get started link', async ({ page, login, homePage }) => {
     'input[placeholder="ENS name or Ethereum address"]',
     'leonardo'
   )
-})
+})