Add CSP guidance to MetaMask Connect troubleshooting - #3022
Merged
Conversation
Add a Content Security Policy section to the MetaMask Connect troubleshooting page explaining required directives (wss://mm-sdk-relay.api.cx.metamask.io in connect-src, img-src data:, etc.), example policies, symptoms, and compatibility notes for older packages. Also document provider.request preserving wallet JSON-RPC error.data since @metamask/connect-evm 2.1.0 (and err.rpcData on multichain), note that closing the modal rejects with EIP-1193 4001 since @metamask/connect-multichain 1.2.0, and update Flask/QR-flow troubleshooting and recommended upgrades.
This commit standardizes formatting across Markdown, TypeScript, JSX, and HTML files to match repo linting and readability rules. It updates several doc tables and code snippets for consistency, tweaks product dropdown event handlers to use double-quoted attribute strings, and removes stale lockfile libc entries generated by dependency resolution.
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
AyushBherwani1998
approved these changes
Aug 13, 2026
AyushBherwani1998
left a comment
Member
There was a problem hiding this comment.
LGTM, i assume other changes are prettier changes.
Member
Author
Yes, the |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Description
Issue(s) fixed
Fixes #
Preview
Checklist
External contributor checklist
Note
Low Risk
Changes are documentation and cosmetic formatting; no runtime application logic beyond HTML attribute quoting in the nav dropdown.
Overview
MetaMask Connect troubleshooting gets a dedicated Content Security Policy section: required
connect-src/img-src(and optional analytics, RPC, modal styling), example header and meta policies, a symptom-to-directive table, and notes for older packages that needed extraconnect-srcfor QR fox icons. The QR-code CSP subsection is shortened to point at that guide, and the diagnostic checklist now calls out relay +data:CSP.The same page documents
error.data/err.rpcDataon failed wallet calls (EVM 2.1.0+), modal close as EIP-11934001(multichain 1.2.0+), and a new MetaMask Flask entry (Flask RDNS detection and recommended package upgrades). Front matter keywords were updated for CSP and Flask.Elsewhere the PR is mostly formatting: editorial spacing in
AGENTS.md, table/type layout in Smart Accounts Kit reference (including versioned copies), column alignment in the SDK migration option table, Prettier-style tweaks inCard.tsx, Snaps types, quickstart/tutorial imports, and product navonfocus/onmouseoverhandlers (double-quoted attributes).package-lock.jsondrops stalelibcfields on optional@parcel/watcherLinux packages.Reviewed by Cursor Bugbot for commit 27177fc. Bugbot is set up for automated code reviews on this repo. Configure here.