#jason_best-practices
soft pierBOT
đ Welcome to your new thread!
â˛ď¸ We'll be here soon! Typically we respond in a few minutes, but sometimes we might take a bit longer if the server is busy or if you have a particularly tricky question.
âąď¸ We close idle threads, which makes them read-only. Once a thread is closed it won't be reopened, but you can always start a new thread if you have another question.
đ This thread will always be available, even after it's closed. You can find it again using Discord's search, or you can save this link: https://discord.com/channels/841573134531821608/1308248458796339282
đ Have more to share? Add more details, code, screenshots, videos, etc. below.
hardy sable
PCI screenshot
tender whale
I can't comment on that requirement from PCI, however, you need to ensure that the stripe.js script is always be loaded directly from https://js.stripe.com
hardy sable
Yeah I understand not commenting on PCI but I am loading from that url, but what it returns changes when you push updates which breaks any hash check
tender whale
you shouldn't have any hash check on the stripe.js script for the exact reason you mentioned. We require you to load directly from the URL so that you always receive the most up to date script
hardy sable
Understood but that goes against PCI, but I'll write up a Compensating Controls Worksheet then I guess if there's nothing else you can suggest
tender whale
I don't know what does a Compensating Controls Worksheet do, but there's nothing I can suggest specifically with regards to the stripe.js script