#daniel_3ds-csp
mystic wyvernBOT
👋 Welcome to your new thread!
⏲️ We'll be here soon! Typically we respond in a few minutes, but sometimes we might take a bit longer if the server is busy or if you have a particularly tricky question.
⏱️ We close idle threads, which makes them read-only. Once a thread is closed it won't be reopened, but you can always start a new thread if you have another question.
🔗 This thread will always be available, even after it's closed. You can find it again using Discord's search, or you can save this link: https://discord.com/channels/841573134531821608/1403149792644960286
📝 Have more to share? Add more details, code, screenshots, videos, etc. below.
gaunt veldt
daniel_3ds-csp
CSP depends how you integrate and we document it here: https://docs.stripe.com/security/guide#content-security-policy
nimble yew
The main point of concern which i’ve just been Googling for the past hour is issues with the different banks iFrames etc on the 3DSecure challenge screen… i’m hoping Stripe handles this much better
For instance, i can’t individually whitelist all the banks across the world 😂
gaunt veldt
we handle all of this for you
nimble yew
So basically if i whitelist all the ones in that doc you linked for me… i should be good as Stripe basically has a iFrame within an iFrame to handle the CSP redirect etc
gaunt veldt
yes
gaunt veldt
sure thing
nimble yew
It seems like on other payment providers, people are turning off the CSP on the payment pages to handle this… isn’t that crazy 😂😂