Shaun Williams

icon company Stripe icon location Houston icon location I work on Checkout UI @stripe. My personal account is @shaunlebron

Results 1 issues of Shaun Williams

CSS injection can be disallowed by CSP's `style-src`

1 comment

The _isolation_ component of our library relies on injecting an inline `` tag. If the client page is to contain [CSP Policy Directives](https://developer.mozilla.org/en-US/docs/Web/Security/CSP/CSP_policy_directives), we have the following options for maintaining...