3 ms·
This looks really good. Few questions: 1. Would this be able to support subscription/recurring payments? E.g. for SaaS. 2. Do you have a versioned release of
by jamieweb 8y ago
This looks really good.
Few questions:
1. Would this be able to support subscription/recurring payments? E.g. for SaaS.
2. Do you have a versioned release of the JavaScript file so that Subresource Integrity (SRI) can be used?
3. Could you document the origins that the JavaScript file loads content of different types from, so that it would be easy to lock this down using a Content Security Policy?
Thanks.
- rorygibson 8y agoGreat feedback, thank you! We don't support subscriptions today - but we're actively working on it. Single-item payments is our MVP but subscriptions are next. Documentation is .... um, "light" at the moment. Right now, you should be able to use connect-src,img-src,script-src all "https://svr.trolley.link" https://svr.trolley.link" We also depend upon Stripe Checkout, so you should add the attributes for their stuff too ( https://stripe.com/docs/security https://stripe.com/docs/security ) Don't have a versioned release right now, which is a gap. Thanks for pointing it out, I'll sort it :-)