Opened 3 years ago

Closed 3 years ago

#22841 closed defect (fixed)

Fix donate-amazon page on the website

Reported by: hiro Owned by: hiro
Priority: Medium Milestone:
Component: Internal Services/Tor Sysadmin Team Version:
Severity: Normal Keywords:
Cc: Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

Fix the following page on the website:

https://www.torproject.org/donate/donate-amazon

Child Tickets

Change History (6)

comment:1 Changed 3 years ago by hiro

Owner: set to hiro
Status: newassigned

comment:2 Changed 3 years ago by hiro

Status: assignedaccepted

comment:3 Changed 3 years ago by hiro

After investigating this, I have found that amazon payments urls need to be allowed by our CSP in order for this page to work. Unfortunately Amazon doesn't offer an alternative that can be implemented as a simple link to a payment gateway. The only way to accept payments through them is to enable their JS widget.

comment:4 Changed 3 years ago by hiro

Component: Webpages/WebsiteInternal Services/Tor Sysadmin Team

comment:5 Changed 3 years ago by hiro

We also have to allow the  following src:

  • api-cdn.amazon.com
  • payments.amazon.com

comment:6 Changed 3 years ago by hiro

Resolution: fixed
Status: acceptedclosed
Note: See TracTickets for help on using tickets.