stripe

2026-10-18 17:15:33 -04:00
parent 71fe90a541
commit 574bd8e605
1 changed files with 3 additions and 1 deletions
@@ -251,7 +251,9 @@ class Handler(BaseHTTPRequestHandler):
        self.send_header("Referrer-Policy", "no-referrer")
        self.send_header(
            "Content-Security-Policy",
-            "default-src 'self'; frame-ancestors 'none'; base-uri 'none'; form-action 'self'",
+            "default-src 'self'; script-src 'self' https://js.stripe.com; "
+            "frame-src 'self' https://js.stripe.com; frame-ancestors 'none'; "
+            "base-uri 'none'; form-action 'self'",
        )

    def read_json(self):