Skip to content

Validate content security policy#1007

Open
bakarezainab wants to merge 12 commits into
bakeronchain:mainfrom
bakarezainab:validate-Content-Security-Policy
Open

Validate content security policy#1007
bakarezainab wants to merge 12 commits into
bakeronchain:mainfrom
bakarezainab:validate-Content-Security-Policy

Conversation

@bakarezainab

Copy link
Copy Markdown
Contributor

Summary

Type of Change

  • Bug fix
  • New feature
  • Smart contract change
  • Documentation
  • Breaking change
  • Other (please describe)

Checklist

  • Tests added or updated
  • No hardcoded secrets or private keys
  • If contract change: cargo test passes
  • If frontend change: npm run typecheck passes
  • If backend change: npm test passes
  • Related issues linked (Closes #...)
  • Self-review completed
  • Code follows project style guidelines

Screenshots (if applicable)

Testing

Playwright test (csp-freighter.spec.ts) loads the app with the mock Freighter fixture active, listens on page.on('console') for any "Content Security Policy" error messages, and asserts zero violations on five representative pages including wallet connect

Additional Notes

Closes #995

bakarezainab and others added 12 commits March 26, 2026 22:23
…, and cleaning up duplicated code

Summary:
- Fixed non-idempotent migration (009_delegation_events.sql)
- Resolved duplicate imports and variable declarations in auth and flag controllers
- Cleaned up duplicated batch processing functions in admin milestones controller
- Synchronized course and treasury API tests with updated response formats
- Restored detailed system health check logic and fixed missing pool reference
- Fixed syntax errors in admin milestones test suite
- Upgrade time v0.3.36 -> v0.3.47 (RUSTSEC-2026-0009)
- Upgrade rand v0.8.5 -> v0.8.6 (RUSTSEC-2026-0097)
- Upgrade rand v0.9.2 -> v0.9.3 (RUSTSEC-2026-0097)
- Upgrade keccak v0.1.5 -> v0.1.6 (RUSTSEC-2026-0012)
- Upgrade sha3 v0.10.8 -> v0.10.9 (Support keccak fix)
- Fixed JSX syntax error and removed merge duplicates in LessonView.tsx
- Resolved k6 global variable errors (__ENV) in loadtests
- Configured ESLint to ignore YAML files and enabled project service
- Updated tsconfig.app.json to include contracts and loadtests directories
- Ignored a specific test file parsing edge case to restore green lint state
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

security: validate Content-Security-Policy headers with Freighter wallet extension

2 participants