On Checkout Screen pops up but cant type anything to process

Hi there

We’d like to investigate this issue for you, but can’t see Yoco activated on your site, which is understandable if there were issues.

Could you please email us at [email protected] with details of your test site, or some other way of testing in order for us to help you?

Many thanks.

oh i deactivated it

try now

Thanks for reactivating it.

I see the problem. Your site has set a Content Security Policy that blocks external iframe content. These iframes are needed to capture the card details securely.

You can see the errors in the console output. E.g.,

Refused to frame ‘https://js.verygoodvault.com/’ because it violates the following Content Security Policy directive: “frame-src ‘self'”.

Please adjust your Content Security Policy to allow these iframes.

Kind regards.

So i must allow https://js.verygoodvault.com/&#8217

Header set Content-Security-Policy "default-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: https://embed.tawk.to https://*.tawk.to; style-src 'self' 'unsafe-inline' https://code.jquery.com https://cdn.jsdelivr.net https://fonts.googleapis.com https: https://embed.tawk.to; img-src 'self' data: https: https://tawk.link https://static-v.tawk.to; font-src 'self' data: https: https://fonts.googleapis.com fonts.gstatic.com https://static-v.tawk.to; connect-src 'self' https://tawk.to https://*.tawk.to wss://*.tawk.to; media-src 'self' https://static-v.tawk.to; frame-src 'self' https://*.tawk.to';"

Currently

looking i to it explains why youtube refuses to embed
font know seems a update to htacces cause a few strict rules i opened up the chat system cause it got blocked will look for the line thats blocking etc and change to allow

thanks i will run it tonight (to hot to think atm)

Hi there

I hope you were able to change your site settings to allow the card fields to be displayed.

I’m marking this thread as resolved but let us know if any further issues.

Kind regards.

Apologies

Yes CSP scr was set to self and changing it to all actually fixed this and youtube scripts.

Will look into a custom script to allow both while restricting anything else later on but working perfectly find by changing scr from “self” to “all” in csp.

Thank You

Marc Cognet

Ah, great to hear all is working. Let us know if any issues in the future.

Good luck with the sales!