sveawebpay / nwt-magento2-checkout

Svea Checkout plugin for Magento 2
Apache License 2.0
0 stars 12 forks source link

Issue when CSP is enabled - can't checkout with VIPPS #66

Closed andrewsurrey closed 1 year ago

andrewsurrey commented 1 year ago

Request fails at checkout when attempting a VIPPS payment and CSP is enabled on Magento.

Fix is quite simple:

<csp_whitelist xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
               xsi:noNamespaceSchemaLocation="urn:magento:module:Magento_Csp:etc/csp_whitelist.xsd">
    <policies>
        <policy id="form-action">
            <values>
                <value id="svea" type="host">*.svea.com</value>
                <value id="vipps" type="host">*.vipps.no</value>
            </values>
        </policy>
    </policies>
</csp_whitelist>

thanks

martinSternelius commented 1 year ago

Fixed in 1.3.17