Create CSP.md

lillithlynn · Nov 29, 2018 · ff367d2 · ff367d2
1 parent cf56d28
commit ff367d2
Showing 1 changed file with 9 additions and 0 deletions.
diff --git a/CSP.md b/CSP.md
@@ -0,0 +1,9 @@
+To prevent unautorized network access, Copay and Bitpay Wallet v5.3.0 and above use the following Content Security Policy (CSP)
+
+  <meta http-equiv="Content-Security-Policy" content="default-src 'self' 'unsafe-eval' https://bws.bitpay.com
+  https://bitpay.com https://auth.shapeshift.io https://shapeshift.io https://api.coinbase.com https://coinbase.com; 
+  img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' data:">
+
+This restrict network connections to the listed hosts only. As a consecuence, accessing self-hosted Bitcore Wallet Service 
+(BWS) hosts will not be allowed. If you are using a self-hosted BWS you need to build the app yourself from source 
+and modify that above line (at app-template/index-template.html) to match your host.