STRIPE Compatibility with Really Simple SSL Hardening [RESOLVED]

Get Help
, , , , , ,
1

Really SImple SSL Pro has added a lot of features and I’m wondering about Cross-Origin-Opener-Policy (COOP) and Cross Origin Embedder Policy (COEP) settings affecting STRIPE (See Configuring the Cross-Origin Policies - Really Simple SSL) AND The Content Security Policy “Frame Ancestors” Configuring the Content Security Policy - Really Simple SSL

NOTE: I had a problem with the Mailchimp Addon which made me wonder about STRIPE after a client reported that STRIPE was taking a very long time to process. I was able to solve the Mailchimp issue by setting the Cross Origin Embedder Policy setting to SELF.

2

If you configure a restrictive CSP for your site, you will want to whitelist any resources loaded from stripe.com subdomains, they use several different subdomains, so you will want to check your page with the browser inspector Network tab opened to find out which subdomains you need to whitelist.

3

Thank you.