Srikanth - csp | Stripe Developers | Page 1

calm socket Sep 7, 2022, 1:27 PM

#

Hi there. You'll have to modify your CSP to allow that image to load. Here's an example: https://stackoverflow.com/questions/40360109/content-security-policy-img-src-self-data

Stack Overflow

Content Security Policy: "img-src 'self' data:"

I have an app, in which the user would be able to copy an image URL, paste it unto an input and the image will be loaded on a box.
But my app, keeps triggering this message:

Refused to load the im...

proven halo Sep 7, 2022, 1:36 PM

#

yeah i tried whats given , its still not working

#

i am using Create-react-app for the frontend

calm socket Sep 7, 2022, 1:40 PM

#

What's the error given?

proven halo Sep 7, 2022, 1:42 PM

#

its still showing the same error even after i put the meta tag in my index.html file @calm socket

calm socket Sep 7, 2022, 1:47 PM

#

Can you share a screenshot of the error?

#

Also do you have a test page I can duplicate this on?

proven halo Sep 7, 2022, 1:50 PM

#

i am running this on localhost and i dont have permissions to share a live page . But i can share a screenshot

#

just hold on

proven halo Sep 7, 2022, 2:11 PM

#

you can see the error in the console

#

this happens when i press the subscribe button which calls the stripe.confirmpayment method @calm socket

calm socket Sep 7, 2022, 2:16 PM

#

Can you click on that src_123 link in that error line and see what it points to exactly?

proven halo Sep 7, 2022, 2:18 PM

#

so when i click on that , it takes me to my configured return_url

#

but the page does not load

calm socket Sep 7, 2022, 2:21 PM

#

Ah so it seems like a problem with your site then

proven halo Sep 7, 2022, 2:21 PM

#

this is what happens when i hover over it

proven halo Sep 7, 2022, 2:22 PM

#

calm socket Ah so it seems like a problem with your site then

any idea what could be the problem

calm socket Sep 7, 2022, 2:23 PM

#

Oh

#

Hm

#

Make sure you have these required directives: https://stripe.com/docs/security/guide#content-security-policy (within the stripe.js tab)

Integration security guide

Ensure PCI compliance and secure customer-server communications.

#Srikanth - csp