code/cl8y-bridge-monorepo

Fork 0

Frontend: CSP blocks Solana WebSocket (ws://localhost:8900) — deposit fails #75

New issue

Closed

opened 2026-03-25 02:44:47 +00:00 by Brouie · 5 comments

Brouie commented

2026-03-25 02:44:47 +00:00

(Migrated from gitlab.com)

Content Security Policy directive blocks ws://localhost:8900 connection needed for Solana transaction confirmation. CSP allows 'wss:' and 'http://localhost:' but not 'ws://localhost:'. Deposit attempt fails silently.

Console error: Connecting to 'ws://localhost:8900/' violates the following Content Security Policy directive: connect-src 'self' https: wss: http://localhost:* http://127.0.0.1:*

Fix: add ws://localhost:* and ws://127.0.0.1:* to CSP connect-src for dev mode.

Content Security Policy directive blocks ws://localhost:8900 connection needed for Solana transaction confirmation. CSP allows 'wss:' and 'http://localhost:*' but not 'ws://localhost:*'. Deposit attempt fails silently. Console error: Connecting to 'ws://localhost:8900/' violates the following Content Security Policy directive: connect-src 'self' https: wss: http://localhost:* http://127.0.0.1:* Fix: add ws://localhost:* and ws://127.0.0.1:* to CSP connect-src for dev mode.

Brouie commented

2026-03-25 02:47:40 +00:00

(Migrated from gitlab.com)

mentioned in issue #73

Brouie commented

2026-03-25 03:27:50 +00:00

(Migrated from gitlab.com)

mentioned in issue #67

PlasticDigits commented

2026-03-25 03:56:14 +00:00

(Migrated from gitlab.com)

mentioned in commit a271fa1d8d

mentioned in commit a271fa1d8db98e0fb0f38feec3b1d04b4b324587

PlasticDigits commented

2026-03-25 03:56:24 +00:00

(Migrated from gitlab.com)

@brouie CSP fix for local Solana WebSocket (ws://localhost:8900) is on feat/solana-integration (commit a271fa1). Please review when you have a chance — leaving this issue open until you confirm.

@brouie CSP fix for local Solana WebSocket (ws://localhost:8900) is on `feat/solana-integration` (commit a271fa1). Please review when you have a chance — leaving this issue open until you confirm.

Brouie commented

2026-03-25 04:45:19 +00:00

(Migrated from gitlab.com)

Verified — CSP connect-src now includes ws://localhost:* and ws://127.0.0.1:*. Commit a271fa1.

Verified — CSP connect-src now includes ws://localhost:* and ws://127.0.0.1:*. Commit a271fa1.

Brouie (Migrated from gitlab.com) closed this issue

2026-03-25 04:45:20 +00:00

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

code/cl8y-bridge-monorepo#75

No description provided.

Rows
Columns