React-stripe-elements: Content Security Policy | resource at inline (“script-src”)

[rfdc]

Hi there,

I'm getting the following errors:

Content Security Policy: The page’s settings blocked the loading of a resource at inline (“script-src”). 2 controller-815299a026a6d6a05ad55cbe5b5816d4.html:1:1
Content Security Policy: The page’s settings blocked the loading of a resource at inline (“script-src”). 2 elements-inner-card-c196d3b8afe06d267d91d2a6623def46.html:1:1

Here is a screenshot for the error:

These errors are happening only at firefox.

How do I resolve this?

Thanks

​

[asolove-stripe]

Hi @rfdc: are you also seeing that the Element is not loading or not behaving correctly, or is it working fine but just showing this error?

This error is saying that something is trying to inject an inline <script> tag into the Stripe iframes, which for security reasons do not allow inline scripts. This is usually caused by a browser plugin that is aggressively trying to inject itself into every document and frame.

If the Element is looking/acting as expected, this error is just letting you know that our security precautions are working.

[rfdc]

Hi @asolove-stripe,
It seems to be working fine on dev mode. I'll let you if any issues arises once I launch it then.
Thanks