Squareup.com issue - Content Security Policy

Posted: January 12, 2018 at 11:26 PM Quote #199157
I am on version 4.  Trying to use SquareUp and getting this error on the checkout page (when looking at the console):
Content Security Policy: The page’s settings blocked the loading of a resource at blob:https://connect.squareup.com/<removed a code> (“script-src 'unsafe-inline' https://js.squareup.com”).

This is causing the page to give the following error when I try to checkout:
Failed to get the card nonce

Thoughts?
This post/answer is useful
0
This post/answer is not useful

Please login or register
to vote for this post.

(click on this box to dismiss)
Posted: January 13, 2018 at 5:33 PM Quote #199173
*bump*, still looking but not understanding how this is supposed to work in this setup.
This post/answer is useful
0
This post/answer is not useful

Please login or register
to vote for this post.

(click on this box to dismiss)
Posted: 2 days ago Quote #199178
1. What is your site URL?
2. Do you have "Content-Security-Policy" meta tag on your page? If yes, please see https://stackoverflow.com/questions/37298608/content-security-policy-the-pages-settings-blocked-the-loading-of-a-resource
This post/answer is useful
0
This post/answer is not useful

Please login or register
to vote for this post.

(click on this box to dismiss)
Interested in the dedicated Premium support services provided by core developers? Please visit http://www.nopcommerce.com/supportservices.aspx

Regards,
Andrei Mazulnitsyn
Posted: 2 days ago Quote #199190
www.bcrl.org

I have removed the SquareUp option, I can reproduce it locally as well.  No meta tag on the site and I don't see it being setup in code either.

I think it has to do with an iFrame inserted by the plugin.

With that being said, I am moving to BrainTree right now. Verified it works in dev, just waiting for a merchant account to be created. I'd rather use SquareUp, but I need something that works.

I'd like to know if anybody has SquareUp working on 4.0.
This post/answer is useful
0
This post/answer is not useful

Please login or register
to vote for this post.

(click on this box to dismiss)
Premium support services
  • Dedicated premium support services provided by core developers are intended for persons who run mission critical websites, work on projects with tight deadlines, or want to get dedicated support.
Professional services
  • Want to open a new store? Want to take your store to the next level? Need a custom extension? We can customize nopCommerce to fit your store perfectly. Request a quote to get started.