Using WalletConnect with Content Security Policy

[roosemberth]

I'm looking to integrate WalletConnect in an existing application to ask the user for an ETH address and then to sign a message with it.

I'm wondering what CSP directives should I use. So far, I've added connect-src wss://relay.walletconnect.com https://explorer-api.walletconnect.com; frame-src https://verify.walletconnect.com; img-src https://explorer-api.walletconnect.com;, but this is based in my own testing, as I couldn't find a list in your documentation.

Thanks in advance for your answers!

[philogicae]

We need to have a page about CSP in the documentation, please guys

[mplummeridge]

where?

[apetta]

+1

Would be great to have this instead of digging around in the console for sources

[wh173-c47]

And this is still unanswered... +1..

I mean I don't know... basics security stuffs...

[glitch-txs]

This should've been an open issue in the docs repo, sorry I missed the discussion <3

WalletConnect/walletconnect-docs#1603

[chris13524]

Docs for CSP here: https://docs.walletconnect.com/advanced/security/content-security-policy