allow same origin for cookies, etc.

allow scripts
Fix stripe SCA redirect/sandboxing
2024-07-08 12:09:38 +02:00 · 2024-07-08 12:03:58 +02:00 · 2024-07-08 11:53:04 +02:00
1 changed files with 2 additions and 1 deletions
--- a/src/pretix/plugins/stripe/static/pretixplugins/stripe/pretix-stripe.js
+++ b/src/pretix/plugins/stripe/static/pretixplugins/stripe/pretix-stripe.js
@@ -295,6 +295,7 @@ var pretixstripe = {
            let iframe = document.createElement('iframe');
            iframe.src = payment_intent_next_action_redirect_url;
            iframe.className = 'embed-responsive-item';
+            iframe.setAttribute('sandbox', 'allow-same-origin allow-scripts allow-top-navigation');
            $('#scacontainer').append(iframe);
            $('#scacontainer iframe').on("load", function () {
                waitingDialog.hide();
@@ -430,4 +431,4 @@ $(function () {
            }
        }
    );
-});
+});
Author	SHA1	Message	Date
Richard Schreiber	3b8dbb87fc	allow same origin for cookies, etc.	2024-07-08 12:09:38 +02:00
Richard Schreiber	b1dfc6d825	allow scripts	2024-07-08 12:03:58 +02:00
Richard Schreiber	5997d3922c	Fix stripe SCA redirect/sandboxing	2024-07-08 11:53:04 +02:00