From f0822d3c27cfe4181dafceda0494bd4095501aa0 Mon Sep 17 00:00:00 2001 From: Richard Schreiber Date: Wed, 17 Jul 2024 16:12:17 +0200 Subject: [PATCH] Docs: add help for HTTP-COOP: same-origin, widget and Paypal (#4311) * Docs: add help for HTTP-COOP, widget and Paypal * fix typo Paypal => PayPal Co-authored-by: Raphael Michel --------- Co-authored-by: Raphael Michel --- doc/user/events/widget.rst | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/doc/user/events/widget.rst b/doc/user/events/widget.rst index 3267c4a000..ce06232b95 100644 --- a/doc/user/events/widget.rst +++ b/doc/user/events/widget.rst @@ -449,6 +449,16 @@ Further reading: * `Stripe Payment Method Domain registration`_ + +External payment providers and Cross-Origin-Opener-Policy +--------------------------------------------------------- + +If you use a payment provider that opens a new window during checkout (such as PayPal), be aware that setting +``Cross-Origin-Opener-Policy: same-origin`` results in an empty popup-window being opened in the foreground. This is +due to JavaScript not having access to the opened window. To mitigate this, you either need to always open the widget’s +checkout in a new tab (see :ref:`Always open a new tab`) or set ``Cross-Origin-Opener-Policy: same-origin-allow-popups`` + + Working with Cross-Origin-Embedder-Policy -----------------------------------------