From 574bd8e6059ed72d47a351692c2ff8bbb04c7da6 Mon Sep 17 00:00:00 2001
From: "Eric Meehan -X (ermeehan - ACTALENT SERVICES LLC at Cisco)"
 <ermeehan@cisco.com>
Date: Sun, 18 Oct 2026 17:15:33 -0400
Subject: [PATCH] stripe

---
 server.py | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/server.py b/server.py
index 878ec9a..b0c9d34 100644
--- a/server.py
+++ b/server.py
@@ -251,7 +251,9 @@ class Handler(BaseHTTPRequestHandler):
         self.send_header("Referrer-Policy", "no-referrer")
         self.send_header(
             "Content-Security-Policy",
-            "default-src 'self'; frame-ancestors 'none'; base-uri 'none'; form-action 'self'",
+            "default-src 'self'; script-src 'self' https://js.stripe.com; "
+            "frame-src 'self' https://js.stripe.com; frame-ancestors 'none'; "
+            "base-uri 'none'; form-action 'self'",
         )
 
     def read_json(self):