Skip to content

Dashboard: Remove reo.dev from CSP script-src in next.config #6740

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
merged 1 commit into from
Apr 16, 2025
Merged

Dashboard: Remove reo.dev from CSP script-src in next.config #6740

merged 1 commit into from
Apr 16, 2025

Conversation

@MananTank
Copy link
Member

@MananTank MananTank commented Apr 15, 2025 •
edited by pr-codex bot
Loading

PR-Codex overview

This PR updates the Content Security Policy (CSP) in the next.config.ts file by removing static.reo.dev from the script-src directive.

Detailed summary

  • Removed static.reo.dev from the script-src directive in the CSP settings.

✨ Ask PR-Codex anything about this PR by commenting with /codex {your question}

@vercel
Copy link

vercel bot commented Apr 15, 2025 •
edited
Loading

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name Status Preview Comments Updated (UTC)
thirdweb-www ✅ Ready (Inspect) Visit Preview 💬 Add feedback Apr 16, 2025 11:00am
4 Skipped Deployments
Name Status Preview Comments Updated (UTC)
docs-v2 ⬜️ Skipped (Inspect) Apr 16, 2025 11:00am
login ⬜️ Skipped (Inspect) Apr 16, 2025 11:00am
thirdweb_playground ⬜️ Skipped (Inspect) Apr 16, 2025 11:00am
wallet-ui ⬜️ Skipped (Inspect) Apr 16, 2025 11:00am

@vercel vercel bot temporarily deployed to Preview – login April 15, 2025 23:01 Inactive
@vercel vercel bot temporarily deployed to Preview – docs-v2 April 15, 2025 23:01 Inactive
@vercel vercel bot temporarily deployed to Preview – wallet-ui April 15, 2025 23:01 Inactive
@vercel vercel bot temporarily deployed to Preview – thirdweb_playground April 15, 2025 23:01 Inactive
@MananTank MananTank marked this pull request as ready for review April 15, 2025 23:01
@MananTank MananTank requested review from a team as code owners April 15, 2025 23:01
@github-actions github-actions bot added the Dashboard Involves changes to the Dashboard. label Apr 15, 2025
@MananTank Graphite App
Copy link
Member Author

MananTank commented Apr 15, 2025 •
edited
Loading

How to use the Graphite Merge Queue

Add either label to this PR to merge it via the merge queue:

  • merge-queue - adds this PR to the back of the merge queue
  • hotfix - for urgent hot fixes, skip the queue and merge this PR next

You must have a Graphite account in order to use the merge queue. Sign up using this link.

An organization admin has enabled the Graphite Merge Queue in this repository.

Please do not merge from GitHub as this will restart CI on PRs being processed by the merge queue.

This stack of pull requests is managed by Graphite. Learn more about stacking.

@MananTank MananTank mentioned this pull request Apr 15, 2025
Merged
@codecov
Copy link

codecov bot commented Apr 15, 2025 •
edited
Loading

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 54.80%. Comparing base (76b522e) to head (64ffe19).
Report is 1 commits behind head on main.

Additional details and impacted files 
@@           Coverage Diff           @@
##             main    #6740   +/-   ##
=======================================
  Coverage   54.80%   54.80%           
=======================================
  Files         895      895           
  Lines       56384    56384           
  Branches     3848     3848           
=======================================
  Hits        30899    30899           
  Misses      25390    25390           
  Partials       95       95
Flag Coverage Δ
packages 54.80% <ø> (ø)
🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@github-actions
Copy link
Contributor

github-actions bot commented Apr 15, 2025 •
edited
Loading

size-limit report 📦

Path Size Loading time (3g) Running time (snapdragon) Total time
thirdweb (esm) 50.42 KB (0%) 1.1 s (0%) 239 ms (+136.51% 🔺) 1.3 s
thirdweb (cjs) 136.84 KB (0%) 2.8 s (0%) 304 ms (+9.19% 🔺) 3.1 s
thirdweb (minimal + tree-shaking) 5.64 KB (0%) 113 ms (0%) 54 ms (+583.85% 🔺) 167 ms
thirdweb/chains (tree-shaking) 514 B (0%) 11 ms (0%) 55 ms (+1342.49% 🔺) 65 ms
thirdweb/react (minimal + tree-shaking) 19.4 KB (0%) 388 ms (0%) 101 ms (+414.61% 🔺) 489 ms

@graphite-app graphite-app bot changed the base branch from 04-16-portal_use_next-themes_for_theme_management_instead_of_custom_code to graphite-base/6740 April 16, 2025 10:43
@graphite-app
Copy link
Contributor

graphite-app bot commented Apr 16, 2025 •
edited
Loading

Merge activity

@graphite-app graphite-app bot changed the base branch from graphite-base/6740 to main April 16, 2025 10:52
@MananTank
Dashboard: Remove reo.dev from CSP script-src in next.config (#6740)
64ffe19 
<!--

## title your PR with this format: "[SDK/Dashboard/Portal] Feature/Fix: Concise title for the changes"

If you did not copy the branch name from Linear, paste the issue tag here (format is TEAM-0000):

## Notes for the reviewer

Anything important to call out? Be sure to also clarify these in your comments.

## How to test

Unit tests, playground, etc.

-->

<!-- start pr-codex -->

---

## PR-Codex overview
This PR updates the Content Security Policy (CSP) in the `next.config.ts` file by modifying the `script-src` directive, removing `static.reo.dev` from the list of allowed sources.

### Detailed summary
- Removed `static.reo.dev` from the `script-src` directive in the CSP.
- No other changes to the CSP directives were made.

> ✨ Ask PR-Codex anything about this PR by commenting with `/codex {your question}`

<!-- end pr-codex -->
@graphite-app graphite-app bot force-pushed the 04-16-dashboard_remove_reo.dev_from_csp_script-src_in_next.config branch from 03d9cca to 64ffe19 Compare April 16, 2025 10:53
@changeset-bot
Copy link

changeset-bot bot commented Apr 16, 2025

⚠️ No Changeset found

Latest commit: 64ffe19

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@vercel vercel bot temporarily deployed to Preview – login April 16, 2025 10:53 Inactive
@vercel vercel bot temporarily deployed to Preview – docs-v2 April 16, 2025 10:53 Inactive
@vercel vercel bot temporarily deployed to Preview – thirdweb_playground April 16, 2025 10:53 Inactive
@vercel vercel bot temporarily deployed to Preview – wallet-ui April 16, 2025 10:53 Inactive
@graphite-app graphite-app bot merged commit 64ffe19 into main Apr 16, 2025
23 checks passed
@graphite-app graphite-app bot deleted the 04-16-dashboard_remove_reo.dev_from_csp_script-src_in_next.config branch April 16, 2025 11:01
@vercel vercel bot temporarily deployed to Production – wallet-ui April 16, 2025 11:01 Inactive
@vercel vercel bot temporarily deployed to Production – thirdweb_playground April 16, 2025 11:01 Inactive
@vercel vercel bot temporarily deployed to Production – login April 16, 2025 11:01 Inactive
@vercel vercel bot temporarily deployed to Production – docs-v2 April 16, 2025 11:01 Inactive
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@joaquim-verges joaquim-verges joaquim-verges approved these changes

@jnsdls jnsdls jnsdls approved these changes

Assignees

@MananTank MananTank

Labels

Dashboard Involves changes to the Dashboard.

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

4 participants

@MananTank @joaquim-verges @jnsdls