search

brave / brave-browser

Brave browser for Android, iOS, Linux, macOS, Windows.
https://brave.com
Mozilla Public License 2.0
18k stars 2.36k forks source link

CSP error logged in console while connecting Ledger #29310

Open onyb opened 1 year ago

onyb commented 1 year ago

I am getting the following error in the console while using a Ledger device (Nano S).

[95413:259:0325/024109.051749:ERROR:CONSOLE(67096)] "Refused to connect to 'https://cdn.live.ledger.com/plugins/ethereum.json' because it violates the following Content Security Policy directive: "default-src 'self'". Note that 'connect-src' was not explicitly set, so 'default-src' is used as a fallback.
", source: chrome-untrusted://ledger-bridge/ledger.bundle.js (67096)

This does not prevent me from connecting the device or signing transactions, but the error should be investigated nonetheless.

diracdeltas commented 1 year ago

If it's not needed for any functionality, let's avoid making the CSP more permissive.