Skip to content

Commit 36ef217

Browse files
authored
Missing Font CSP Paylater Popup
Paylater Popup: Refused to load the font 'https://www.paypalobjects.com/webstatic/mktg/2014design/font/PP-Sans/PayPalSansBig-Medium.woff' because it violates the following Content Security Policy directive
1 parent af9ab20 commit 36ef217

File tree

1 file changed

+5
-0
lines changed

1 file changed

+5
-0
lines changed

app/code/Magento/Paypal/etc/csp_whitelist.xml

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -40,6 +40,11 @@
4040
<value id="pilot_payflowlink_paypal_com" type="host">pilot-payflowlink.paypal.com</value>
4141
</values>
4242
</policy>
43+
<policy id="font-src">
44+
<values>
45+
<value id="paypal_objects" type="host">www.paypalobjects.com</value>
46+
</values>
47+
</policy>
4348
<policy id="form-action">
4449
<values>
4550
<value id="www_pilot_payflowlink_paypal" type="host">pilot-payflowlink.paypal.com</value>

0 commit comments

Comments
 (0)