Allow localhost network (#1104)

* Network Selector UI updated * Update network requests * Fix tests * Allow localhost network * Update CSP
stellar · Nov 6, 2024 · 684ee3e · 684ee3e
1 parent 586af2b
commit 684ee3e
Show file tree

Hide file tree

Showing 4 changed files with 8 additions and 2 deletions.
diff --git a/src/middleware.ts b/src/middleware.ts
@@ -4,6 +4,7 @@ export function middleware(request: NextRequest) {
   const nonce = Buffer.from(crypto.randomUUID()).toString("base64");
 
   // script-src 'unsafe-eval' is needed for XDR JSON WebAssembly scripts
+  // connect-src http://localhost:* to allow local network
   const cspHeader = `
     default-src 'self';
     script-src 'self' 'nonce-${nonce}' 'strict-dynamic' https: 'unsafe-inline' 'unsafe-eval';
@@ -13,7 +14,7 @@ export function middleware(request: NextRequest) {
         : `'unsafe-inline'`
     };
     img-src 'self' https://stellar.creit.tech/wallet-icons/ blob: data:;
-    connect-src 'self' https:;
+    connect-src 'self' http://localhost:* https:;
     font-src 'self' https://fonts.gstatic.com/;
     object-src 'none';
     frame-src 'self' https://connect.trezor.io/;

diff --git a/src/query/useLatestLedger.ts b/src/query/useLatestLedger.ts
@@ -13,7 +13,10 @@ export const useLatestLedger = ({
   const query = useQuery({
     queryKey: ["useLatestLedger"],
     queryFn: async () => {
-      const rpcServer = new StellarRpc.Server(rpcUrl, { headers });
+      const rpcServer = new StellarRpc.Server(rpcUrl, {
+        headers,
+        allowHttp: new URL(rpcUrl).hostname === "localhost",
+      });
 
       try {
         const latestLedger = await rpcServer.getLatestLedger();

diff --git a/src/query/useSubmitHorizonTx.ts b/src/query/useSubmitHorizonTx.ts
@@ -28,6 +28,7 @@ export const useSubmitHorizonTx = () => {
       );
       const horizonServer = new Horizon.Server(horizonUrl, {
         headers: isEmptyObject(headers) ? undefined : { ...headers },
+        allowHttp: new URL(horizonUrl).hostname === "localhost",
       });
       return (await horizonServer.submitTransaction(
         transaction,

diff --git a/src/query/useSubmitRpcTx.ts b/src/query/useSubmitRpcTx.ts
@@ -34,6 +34,7 @@ export const useSubmitRpcTx = () => {
         );
         const rpcServer = new StellarRpc.Server(rpcUrl, {
           headers: isEmptyObject(headers) ? undefined : { ...headers },
+          allowHttp: new URL(rpcUrl).hostname === "localhost",
         });
         const sentTx = await rpcServer.sendTransaction(transaction);