harinth-confirm-pi | Stripe Developers | Page 1

faint zephyr Feb 28, 2022, 1:14 PM

#

Hey! Not sure I understand the question. Yes you'll need to create the Payment Intent on a server using your secret keys

#

What specific XSS concern do you have?

dry condor Feb 28, 2022, 1:17 PM

#

I need to create payment Intent before being submit the form to do authentication. That must be doing with ajax

#

But I wonder whether ajax will work from a form in third party site

faint zephyr Feb 28, 2022, 1:20 PM

#

That's not really a Stripe specific question

#

Have you tried it? There's no reason why you couldn't make those API requests assuming configured correctly

#

Generally you'd host your own server that your form can call to facilitate the Stripe API requests to create a Payment Intent

dry condor Feb 28, 2022, 1:29 PM

#

Is there any way paymentIntent can be created from client side script of Stripe?

faint zephyr Feb 28, 2022, 1:30 PM

#

There's not, no. You need to use your secret key which should only ever be used in a server environment

#harinth-confirm-pi