> NoScript detected a potential Cross-Site Scripting attack > from https://edge.bigthink.com https://edge.bigthink.com to https://js.stripe.com https://js.stri

> NoScript detected a potential Cross-Site Scripting attack > from https://edge.bigthink.com https://edge.bigthink.com to https://js.stripe.com https://js.stripe.com. > Suspicious data: > (URL) https://js.stripe.com/v3/elements-inner-card-212...b40.html#style[base][fontFamily]="Gotham+Narrow+SSm+A",+"Gotham+Narrow+SSm+B",+"Helvetica+Neue",+Helvetica,+Roboto,+Arial,+sans-serif&style[base][fontSize]=14px&style[base][color]=#1a1a1a&componentName=card&wait=false&rtl=false&keyMode=live&apiKey=pk_live_cFe...AEV&origin=https://edge.bigthink.com&referrer=https://edge.bigthink.com/users/subscribe?p=1&pu=1&utm_medium=organic&utm_source=bigthink&controllerId=__privateStripeController1 https://js.stripe.com/v3/elements-inner-card-212...b40.html#... WTF is that about? Setup for "Join Premium"? But why talk to Stripe in advance? Edit: Hey, I apologize for going off topic. But I'm just a little surprised that a site would want to trigger XSS warnings. And why they'd risk it.