Removed the previous implementation of validating whether the REFERER is omise or not because it is not reliable as some browsers limit access to not allow HTTP_REFERER to be passed. It has been replaced with $_SERVER['HTTP_SEC_FETCH_SITE']; that checks whether the request is user originated or not.
1. Objective
Fix the issue of not redirecting to Thank you page after completing payment when the website has no SSL.
Jira Ticket: #323
2. Description of change
Removed the previous implementation of validating whether the REFERER is omise or not because it is not reliable as some browsers limit access to not allow HTTP_REFERER to be passed. It has been replaced with
$_SERVER['HTTP_SEC_FETCH_SITE'];
that checks whether the request is user originated or not.References: https://stackoverflow.com/questions/6880659/in-what-cases-will-http-referer-be-empty https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Sec-Fetch-Site
3. Quality assurance
Checkout with 3DS and you should see the Thank you page after completing payment.
🔧 Environments: