#osroca - mask CC#

1 messages · Page 1 of 1 (latest)

stable tangleBOT
solid leaf
#

Stripe.js does not support masking that number unfortunately. As far as I know vue-stripe wouldn't have been able to do that. You can try reaching out to the vue-stripe developers or forums to see if they know more though

trail junco
#

sorry, I meant that the option was (apparently) in stripe elements from Stripe.js back in the days

#

vue-stripe is just a wrapper on top of Stripe.js, it passes a elements-options object with anything that Stripe.js accepts. maskNumber is not accepted though

#

any good reason I could give my boss to do not need the mask?

#

I would say I have never seen that mask in a Stripe payment (checkout) formulary

solid leaf
#

Gotcha, yeah as far as I know stripe.js doesn't support any kind of masking functionality like that. I think our GitHub has an active feature request for this and I am trying to find it

#

I think we speak to this in the GH issue better than I can phrase it now but that really isn't required as a security measure usually at least as far as different compliance requirements go

trail junco
#

yeah! of course if you have someone looking what you are typing over your shoulder ...

#

I would say, though, that I have seen the card element showing only the last 4 digits at some moment ...

solid leaf
#

So I found the old issue I was talking about, looks like we don't say much in it about this other than

The PCI and other appropriate standards also don't recommend doing so.
So it sounds like at the moment it isn't seen as providing enough additional security to be added
https://github.com/stripe-archive/react-stripe-elements/issues/328

trail junco
#

Pompey, thanks a lot for the issue references. I'll will look into them and, at least, I'll have something to tell my boss

solid leaf
#

osroca - mask CC#