Relax style-src CSP

stellar · Mar 4, 2025 · cb42bc3 · cb42bc3
1 parent 026d0fe
commit cb42bc3
Show file tree

Hide file tree

Showing 3 changed files with 3 additions and 13 deletions.
diff --git a/src/app/(sidebar)/smart-contracts/contract-explorer/page.tsx b/src/app/(sidebar)/smart-contracts/contract-explorer/page.tsx
@@ -128,13 +128,8 @@ export default function ContractExplorer() {
         <form
           onSubmit={(e) => {
             e.preventDefault();
-
-            try {
-              fetchContractInfo();
-              smartContracts.updateExplorerContractId(contractIdInput);
-            } catch (e) {
-              // Do nothing
-            }
+            fetchContractInfo();
+            smartContracts.updateExplorerContractId(contractIdInput);
           }}
           className="ContractExplorer__form"
         >

diff --git a/src/components/CodeEditor/index.tsx b/src/components/CodeEditor/index.tsx
@@ -1,7 +1,6 @@
 import { useEffect, useRef, useState } from "react";
 import { Button, CopyText, Icon } from "@stellar/design-system";
 import MonacoEditor, { useMonaco } from "@monaco-editor/react";
-
 import { useStore } from "@/store/useStore";
 import { Box } from "@/components/layout/Box";
 

diff --git a/src/middleware.ts b/src/middleware.ts
@@ -8,11 +8,7 @@ export function middleware(request: NextRequest) {
   const cspHeader = `
     default-src 'self';
     script-src 'self' 'nonce-${nonce}' 'strict-dynamic' https: 'unsafe-inline' 'unsafe-eval';
-    style-src 'self' https://fonts.googleapis.com https: ${
-      process.env.NODE_ENV === "production"
-        ? `'nonce-${nonce}'`
-        : `'unsafe-inline'`
-    };
+    style-src 'self' https: 'unsafe-inline';
     img-src 'self' https://stellar.creit.tech/wallet-icons/ blob: data:;
     connect-src 'self' http://localhost:* https:;
     font-src 'self' https://fonts.gstatic.com/ https://cdn.jsdelivr.net/npm/[email protected]/min/vs/base/browser/ui/codicons/codicon/codicon.ttf;