Skip to content

Instantly share code, notes, and snippets.

@erichelgeson
Created February 5, 2018 16:18
Show Gist options
  • Save erichelgeson/6c8ff2acc1115635271454799f1b1911 to your computer and use it in GitHub Desktop.
Save erichelgeson/6c8ff2acc1115635271454799f1b1911 to your computer and use it in GitHub Desktop.
<html>
<head>
<meta http-equiv="Content-Security-Policy"
content="default-src 'self' 'unsafe-inline' https://* https://api.stripe.com;
img-src 'self' https://www.google-analytics.com;
font-src 'self' http://fonts.gstatic.com;
frame-src https://js.stripe.com;
script-src 'self' 'unsafe-inline' https://* https://js.stripe.com https://www.google-analytics.com;
connect-src 'self' https://api.stripe.com;">
<script src="https://js.stripe.com/v3/"></script>
</head>
</html>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment