search

dfinity / cycles-wallet

DFINITY Cycles Wallet
Apache License 2.0
55 stars 30 forks source link

fix: add security headers #136

Closed lwshang closed 2 years ago

lwshang commented 2 years ago

As suggested in https://smartcontracts.org/docs/security-best-practices/web-app-development-security-best-practices.html#define-security-headers

lwshang commented 2 years ago

@robin-kunzler The wallet can be tested with following steps:

# In cycles-wallet repo
npm ci
dfx start --background --clean
dfx deploy
dfx canister id wallet

# In internet-identity repo
npm ci
II_FETCH_ROOT_KEY=1 dfx deploy --no-wallet --argument '(null)'
dfx canister id internet_identity

# Open url in browser
http://localhost:8000/?canisterId=<wallet_canister_id_here>&identityProvider=http://localhost:8000/?canisterId=<internet_identity_id>
# Follow the auth steps with Internet Identity