@olavoasantos Could you please check & provide your thoughts ?
Topic summary
An app was delisted and the developer reports persistent Shopify “error/requirement” banners tied to App Bridge 3.0, Content Security Policy (CSP), and the required “host” parameter. Key screenshots (links provided) show the error messages and configuration details central to the discussion.
A participant references a known App Bridge issue (GitHub #160), suggesting the problem may be a platform bug. A Shopify representative asks for the specific delisting reason and notes the outdated App Bridge banner may be separate from the delisting.
They highlight that the app hard-codes the host value and recommend initializing App Bridge with new URLSearchParams(location.search).get(“host”) per Shopify docs, especially when testing via admin.shopify.com.
The developer says host is only provided on first load and should be persisted, but they observe host in the iframe URL while their code reads it as null, so they used a hard-coded host that matches the store during staging.
Status: unresolved. The delisting cause is still unclear, the host parameter remains null for the developer, and the referenced bug appears open.
Suggested next steps: verify App Bridge v3 initialization, avoid hard-coded host, test in the admin domain, and obtain the official delisting rationale from Shopify.