nafix-elements

[deft pine]

Hello! Give me a mi nute and I'll take a look

[fossil topaz]

nice thanks. love the owl pfp

[deft pine]

Quick question - are you building this as an extension?

[fossil topaz]

nope just vanilla Stripe Elements, with some of the design changed using Elements Appearance API

[deft pine]

Sorry let me clarify - I mean are you building a Firefox extension (I'm mostly wondering why it has moz-extension in the console logs)

[fossil topaz]

ah ok no problem, I'm not building a firefox extension, just building this into our own site. It appears to be that CSP is not allowing for stripe's js script to be executed. What does Stripe recommend you do in this case?

[deft pine]

👍 Thanks for clarifying that!

[fossil topaz]

do I need to create a CSP policy with these things enabled? I guess its interesting because I didin't create one to start with but its possible firefox has a browser form to stop xss