diff --git a/apps/frontend/next.config.js b/apps/frontend/next.config.js index a7785c1f..32f328a5 100644 --- a/apps/frontend/next.config.js +++ b/apps/frontend/next.config.js @@ -12,8 +12,10 @@ const CONNECT_DOMAINS = [ 'https://mainnet.fuel.network', // Outside domains 'https://api.web3modal.org', - 'https://api.bako.global', 'wss://relay.walletconnect.com', + 'https://verify.walletconnect.com/', + 'https://api.bako.global', + 'wss://api.bako.global', // PostHog 'https://eu.i.posthog.com', // Sentio @@ -31,7 +33,7 @@ const CSP_HEADER = ` script-src 'self' 'unsafe-eval' 'unsafe-inline' https://vercel.live https://static.swaylend.com https://testnet-swaylend.b-cdn.net; style-src 'self' 'unsafe-inline' https://static.swaylend.com https://testnet-swaylend.b-cdn.net https://fonts.googleapis.com; img-src 'self' blob: data: https://static.swaylend.com https://testnet-swaylend.b-cdn.net; - font-src 'self' https://fonts.googleapis.com https://static.swaylend.com https://testnet-swaylend.b-cdn.net; + font-src 'self' https://fonts.googleapis.com https://fonts.gstatic.com https://static.swaylend.com https://testnet-swaylend.b-cdn.net; object-src 'none'; base-uri 'self'; form-action 'self';