Skip to content

fix(security): re-enable TLS verification in blockscout frontend and pin CI action SHAs #462

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
mertcano wants to merge 1 commit into from
Closed

fix(security): re-enable TLS verification in blockscout frontend and pin CI action SHAs #462

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
57 changes: 31 additions & 26 deletions deployments/monitoring/config-blockscout/frontend/frontend.env
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,26 +1,31 @@
NEXT_PUBLIC_API_HOST=localhost
NEXT_PUBLIC_API_PROTOCOL=http
NEXT_PUBLIC_NETWORK_NAME=Arc Localnet
NEXT_PUBLIC_NETWORK_SHORT_NAME=Arc
NEXT_PUBLIC_NETWORK_ID=1337
NEXT_PUBLIC_NETWORK_CURRENCY_NAME=USDC
NEXT_PUBLIC_NETWORK_CURRENCY_SYMBOL=USDC
NEXT_PUBLIC_NETWORK_CURRENCY_DECIMALS=18
NEXT_PUBLIC_API_BASE_PATH=/
NEXT_PUBLIC_APP_HOST=localhost
NEXT_PUBLIC_APP_PROTOCOL=http
NEXT_PUBLIC_HOMEPAGE_CHARTS=[]
NEXT_PUBLIC_IS_TESTNET=true
NEXT_PUBLIC_API_WEBSOCKET_PROTOCOL=ws
NEXT_PUBLIC_API_SPEC_URL=https://raw.githubusercontent.com/blockscout/blockscout-api-v2-swagger/main/swagger.yaml
NEXT_PUBLIC_COLOR_THEME_DEFAULT=light
NEXT_PUBLIC_HOMEPAGE_HERO_BANNER_CONFIG='{ "background": ["linear-gradient(81deg, #F1EBFF 0%, #E1F2FF 108.8%)","linear-gradient(72deg, #175284 0%, #342552 112.58%)"], "text_color": ["#29233B", "#ffffff"], "button": { "_default": { "background": ["#0073C3", "#1AA3FF"], "text_color": ["#ffffff", "#000000"] }, "_hover": { "background": ["#1AA3FF", "#1894E8"] } } }'
NEXT_PUBLIC_NETWORK_ICON=https://assets.circle.com/product-apps/assets/images/Circle-Icon.svg
NEXT_PUBLIC_NETWORK_ICON_DARK=https://assets.circle.com/product-apps/assets/images/Circle-Icon.svg
NEXT_PUBLIC_NETWORK_LOGO=https://assets.circle.com/product-apps/assets/images/Circle-Logo-Light.svg
NEXT_PUBLIC_NETWORK_LOGO_DARK=https://assets.circle.com/product-apps/assets/images/Circle-Logo-Dark.svg
FAVICON_MASTER_URL=https://assets.circle.com/product-apps/assets/images/Circle-Favicon-Lg.png
NEXT_PUBLIC_AD_BANNER_PROVIDER=none
NEXT_PUBLIC_AD_TEXT_PROVIDER=none
# Disable TLS verification for ZScaler
NODE_TLS_REJECT_UNAUTHORIZED=0
NEXT_PUBLIC_API_HOST=localhost
NEXT_PUBLIC_API_PROTOCOL=http
NEXT_PUBLIC_NETWORK_NAME=Arc Localnet
NEXT_PUBLIC_NETWORK_SHORT_NAME=Arc
NEXT_PUBLIC_NETWORK_ID=1337
NEXT_PUBLIC_NETWORK_CURRENCY_NAME=USDC
NEXT_PUBLIC_NETWORK_CURRENCY_SYMBOL=USDC
NEXT_PUBLIC_NETWORK_CURRENCY_DECIMALS=18
NEXT_PUBLIC_API_BASE_PATH=/
NEXT_PUBLIC_APP_HOST=localhost
NEXT_PUBLIC_APP_PROTOCOL=http
NEXT_PUBLIC_HOMEPAGE_CHARTS=[]
NEXT_PUBLIC_IS_TESTNET=true
NEXT_PUBLIC_API_WEBSOCKET_PROTOCOL=ws
NEXT_PUBLIC_API_SPEC_URL=https://raw.githubusercontent.com/blockscout/blockscout-api-v2-swagger/main/swagger.yaml
NEXT_PUBLIC_COLOR_THEME_DEFAULT=light
NEXT_PUBLIC_HOMEPAGE_HERO_BANNER_CONFIG='{ "background": ["linear-gradient(81deg, #F1EBFF 0%, #E1F2FF 108.8%)","linear-gradient(72deg, #175284 0%, #342552 112.58%)"], "text_color": ["#29233B", "#ffffff"], "button": { "_default": { "background": ["#0073C3", "#1AA3FF"], "text_color": ["#ffffff", "#000000"] }, "_hover": { "background": ["#1AA3FF", "#1894E8"] } } }'
NEXT_PUBLIC_NETWORK_ICON=https://assets.circle.com/product-apps/assets/images/Circle-Icon.svg
NEXT_PUBLIC_NETWORK_ICON_DARK=https://assets.circle.com/product-apps/assets/images/Circle-Icon.svg
NEXT_PUBLIC_NETWORK_LOGO=https://assets.circle.com/product-apps/assets/images/Circle-Logo-Light.svg
NEXT_PUBLIC_NETWORK_LOGO_DARK=https://assets.circle.com/product-apps/assets/images/Circle-Logo-Dark.svg
FAVICON_MASTER_URL=https://assets.circle.com/product-apps/assets/images/Circle-Favicon-Lg.png
NEXT_PUBLIC_AD_BANNER_PROVIDER=none
NEXT_PUBLIC_AD_TEXT_PROVIDER=none
# Security fix (audit): NODE_TLS_REJECT_UNAUTHORIZED=0 disables TLS
# certificate verification process-wide for the Node.js server, exposing all
# outbound HTTPS traffic to man-in-the-middle attacks. It was previously used
# as a ZScaler proxy workaround and is now disabled. If a corporate proxy
# (e.g. ZScaler) intercepts TLS, configure its root CA via NODE_EXTRA_CA_CERTS
# instead of disabling verification.
# NODE_TLS_REJECT_UNAUTHORIZED=0
Loading