(null)
+
+ React.useEffect(() => {
+ if (!hasMore || loading) return
+
+ const observer = new IntersectionObserver((entries) => {
+ if (entries[0].isIntersecting) {
+ onIntersect()
+ }
+ }, { rootMargin: '200px' })
+
+ if (sentinelRef.current) {
+ observer.observe(sentinelRef.current)
+ }
+
+ return () => observer.disconnect()
+ }, [onIntersect, hasMore, loading])
+
+ return (
+
+ {loading ? (
+ Loading more...
+ ) : hasMore ? (
+ Scroll for more
+ ) : (
+ No more {label}
+ )}
+
+ )
+}
+
function LoadingRows({ count, height }) {
return (
@@ -596,29 +628,12 @@ export default function Transactions() {
))}
-
- {txHasMore || txPagingLoading ? (
-
- ) : (
- No more transactions
- )}
-
+
)}
@@ -897,29 +912,12 @@ export default function Transactions() {
))}
-
- {opsHasMore || opsPagingLoading ? (
-
- ) : (
- No more operations
- )}
-
+
)}
diff --git a/tests/csp.test.js b/tests/csp.test.js
new file mode 100644
index 00000000..75899c20
--- /dev/null
+++ b/tests/csp.test.js
@@ -0,0 +1,55 @@
+import fs from 'fs';
+import path from 'path';
+import { fileURLToPath } from 'url';
+import assert from 'assert';
+
+const __filename = fileURLToPath(import.meta.url);
+const __dirname = path.dirname(__filename);
+
+const nginxConfPath = path.resolve(__dirname, '../nginx.conf');
+const indexHtmlPath = path.resolve(__dirname, '../index.html');
+
+console.log('Running CSP tests...');
+
+try {
+ // Primary flow: nginx.conf should have a valid CSP header
+ const nginxContent = fs.readFileSync(nginxConfPath, 'utf8');
+ const cspRegex = /add_header Content-Security-Policy "(.*)" always;/;
+ const match = nginxContent.match(cspRegex);
+ assert(match, 'CSP header missing in nginx.conf');
+ const csp = match[1];
+
+ assert(csp.includes("default-src 'self'"), "CSP missing default-src 'self'");
+ assert(csp.includes("script-src 'self'"), "CSP missing script-src 'self'");
+ assert(csp.includes("connect-src"), "CSP missing connect-src");
+ console.log('✅ Primary flow: nginx.conf valid');
+
+ // Primary flow: index.html should have a valid CSP meta tag
+ const htmlContent = fs.readFileSync(indexHtmlPath, 'utf8');
+ const htmlCspRegex = //;
+ const htmlMatch = htmlContent.match(htmlCspRegex);
+ assert(htmlMatch, 'CSP meta tag missing in index.html');
+ const htmlCsp = htmlMatch[1];
+
+ assert(htmlCsp.includes("default-src 'self'"), "HTML CSP missing default-src 'self'");
+ assert(htmlCsp.includes("script-src 'self'"), "HTML CSP missing script-src 'self'");
+ assert(htmlCsp.includes("connect-src"), "HTML CSP missing connect-src");
+ console.log('✅ Primary flow: index.html valid');
+
+ // Boundary case: should allow required Stellar endpoints but not wildcard everything
+ assert(csp.includes("https://*.stellar.org"), "Missing stellar.org");
+ assert(csp.includes("wss://*.walletconnect.com"), "Missing walletconnect.com");
+ assert(!csp.match(/connect-src [^;]*\s\*(?:\s|;)/), "connect-src is too permissive with wildcard");
+ console.log('✅ Boundary case: Required endpoints allowed securely');
+
+ // Failure case: should not allow arbitrary domains like http://evil.com
+ assert(!csp.includes("evil.com"), "CSP should not allow evil.com");
+ assert(!csp.includes("http://"), "CSP should not allow http://");
+ console.log('✅ Failure case: Malicious endpoints blocked');
+
+ console.log('All tests passed!');
+ process.exit(0);
+} catch (error) {
+ console.error('Test failed:', error.message);
+ process.exit(1);
+}