Error connecting Stripe

Hi @vasconx ,

Thank you for reaching out.

I understand this situation can be frustrating; but, let me try to assist you here to the best of my abilities.

Just to be clear, when you say you’re testing on a demo site, are you referring to the (free) sandbox site that we provide — https://demo.theeventscalendar.com/request-demo-site/? Since you are on a “sandbox”, have you tried enabling test mode on your Stripe account and Tickets Commerce (How to Set Up Stripe Test Payments with Tickets Commerce) to see if that alleviates the situation?

Hello!
Thanks for the support.
Yes, I am using the sandbox (free) site that I provided.
I have enabled the test mode, but I can't connect.
It connects and doesn't disconnect instantly.

I use Stripe to accept payments directly on my pages and have never had any issues.

On the Stripe connection page, I get some errors when I press f12 in the browser:

"Some resources are blocked because their origin is not listed in your site's Content Security Policy (CSP). Your site's CSP is whitelist-based, so resources must be whitelisted in order to be accessed.

A site's Content Security Policy is set via an HTTP header (recommended) or via an HTML meta tag.

To fix this issue, do one of the following:

(Recommended) If you are using a whitelist for 'script-src', consider switching from a whitelist CSP to a strict CSP, because strict CSPs are more robust against XSS. Here's how to set a strict CSP.

Or, carefully check that all blocked resources are trusted; if they are, include their sources in your site's CSP. ??Never add a source that you do not trust to your site's CSP your site. If you don't trust the source, consider hosting resources on your own site.

7 directives
Resource Status Directive Source Location
https://stripe.com/ blocked frame-ancestors (unknown)
https://stripe.com/ reports only frame-ancestors (unknown)
https://dashboard.stripe.com/ blocked frame-ancestors (unknown)
https://support-conversations.stripe.com/ blocked frame-ancestors (unknown)
https://marketplace.stripe.com/ blocked frame-ancestors (unknown)
https://support.stripe.com/ blocked frame-ancestors (unknown)
https://docs.stripe.com/ blocked frame-ancestors (unknown)
"

Hi @vasconx ,

Thank you for your message and the information.

Based on the description of you reply, it looks like we’re dealing with some Content Security Policy (CSP) HTTP Response Header here, which is a server configuration (not the plugin’s). I would recommend reaching out to the WebHost of your sandbox account to rectify this.

But the demo account is provided by you. Do I have to solve your server problem? Is that right?
I’m confused.

Hi @vasconx ,

Thank you for your message and the clarification. I also apologize for misunderstanding the situation. Let me check on this with the team.

In the meantime, could you let me know if you’ve installed any other plugins other than the ones that came with the sandbox?

NO!

Hi @vasconx ,

Thank you for your message and the confirmation.

Could you please get back to me with the URL of the sandbox, so we could take a look into it in detail?

Hi @vasconx

I hope everything is going smoothly for you. I just wanted to touch base and inquire if you had the opportunity to review Tristan’s previous response as it has been some time since we last heard from you.

Looking forward to your reply.