Skip to content

Commit a74431a

Browse files
benjamin-lambenjamin-lam
authored
Merge pull request #75 from unzerdev/csp_changes
Csp changes
2 parents 6dcf99e + 055cec8 commit a74431a

File tree

4 files changed

+47
-12
lines changed

4 files changed

+47
-12
lines changed

‎CHANGELOG.md

+6-1
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,12 @@ All notable changes to this project will be documented in this file.
33

44
The format is based on [Keep a Changelog](http://keepachangelog.com/en/1.1.0/) and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.html).
55

6-
## [3.3.0](https://github.com/unzerdev/magento2/compare/3.2.2..3.3.0)
6+
## [3.2.4](https://github.com/unzerdev/magento2/compare/3.2.3..3.2.4)
7+
### Changed
8+
* Updated CSP Whitelist
9+
* Added deprecated warnings for Heidelpay / CSP
10+
11+
## [3.2.3](https://github.com/unzerdev/magento2/compare/3.2.2..3.2.3)
712
### Added
813
* ApplePay V2
914

‎composer.json

+1-1
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@
22
"name": "unzerdev/magento2",
33
"description": "This extension for Magento 2 provides a direct integration of the Unzer payment types to your Magento 2 shop via the Unzer Payment API (PAPI).",
44
"type": "magento2-module",
5-
"version": "3.2.2",
5+
"version": "3.2.4",
66
"license": "Apache-2.0",
77
"require": {
88
"php": "~7.4.0|~8.1.0|~8.2.0|~8.3.0",

‎etc/csp_whitelist.xml

+39-9
Original file line numberDiff line numberDiff line change
@@ -1,45 +1,75 @@
11
<?xml version="1.0"?>
22
<csp_whitelist xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="urn:magento:module:Magento_Csp:etc/csp_whitelist.xsd">
33
<policies>
4+
<!-- SCRIPT-SRC -->
45
<policy id="script-src">
56
<values>
67
<value id="unzer-ui-js" type="host">https://static.unzer.com</value>
78
<value id="apple-js" type="host">https://applepay.cdn-apple.com</value>
89
<value id="google-pay" type="host">https://pay.google.com</value>
910
<value id="jquery-js" type="host">https://code.jquery.com</value>
1011
<value id="threatmetrix" type="host">https://h.online-metrix.net</value>
12+
<value id="threatmetrix-64" type="host">https://h64.online-metrix.net</value>
1113
</values>
1214
</policy>
15+
16+
<!-- CONNECT-SRC -->
1317
<policy id="connect-src">
1418
<values>
15-
<value id="unzer-payment-1" type="host">https://payment.unzer.com</value>
16-
<value id="unzer-payment-2" type="host">https://payment.heidelpay.com</value>
17-
<value id="unzer-payment-3" type="host">https://sbx-payment.heidelpay.com</value>
19+
<!-- Unzer Payment APIs -->
1820
<value id="unzer-api-1" type="host">https://api.unzer.com</value>
19-
<value id="unzer-api-2" type="host">https://api.heidelpay.com</value>
20-
<value id="unzer-api-3" type="host">https://sbx-api.heidelpay.com</value>
21+
<value id="unzer-api-heidelpay-deprecated" type="host">https://api.heidelpay.com</value>
22+
<value id="unzer-api-sbx-heidelpay-deprecated" type="host">https://sbx-api.heidelpay.com</value>
23+
<value id="unzer-api-4" type="host">https://sbx-api.unzer.com</value>
24+
25+
<!-- Payment Frames -->
26+
<value id="unzer-payment-1" type="host">https://payment.unzer.com</value>
27+
<value id="unzer-payment-heidelpay-deprecated" type="host">https://payment.heidelpay.com</value>
28+
<value id="unzer-payment-sbx-heidelpay-deprecated" type="host">https://sbx-payment.heidelpay.com</value>
29+
<value id="unzer-payment-4" type="host">https://sbx-payment.unzer.com</value>
30+
31+
<!-- ThreatMetrix -->
2132
<value id="threatmetrix" type="host">https://h.online-metrix.net</value>
33+
<value id="threatmetrix-64" type="host">https://h64.online-metrix.net</value>
34+
35+
<!-- Google Pay -->
2236
<value id="google-pay-1" type="host">https://google.com/pay</value>
2337
<value id="google-pay-2" type="host">https://www.google.com/pay</value>
2438
<value id="google-pay-3" type="host">https://pay.google.com</value>
39+
<value id="hpcgw" type="host">https://test-heidelpay.hpcgw.net/</value>
40+
<value id="sbx" type="host">https://sbx-api.heidelpay.com/</value>
2541
</values>
2642
</policy>
43+
44+
<!-- FRAME-SRC -->
2745
<policy id="frame-src">
2846
<values>
29-
<value id="unzer-frame-1" type="host">https://payment.unzer.com/</value>
30-
<value id="unzer-frame-2" type="host">https://payment.heidelpay.com/</value>
31-
<value id="unzer-frame-3" type="host">https://sbx-payment.heidelpay.com/</value>
47+
<!-- Payment Frames -->
48+
<value id="unzer-frame-1" type="host">https://payment.unzer.com</value>
49+
<value id="unzer-frame-heidelpay-deprecated" type="host">https://payment.heidelpay.com</value>
50+
<value id="unzer-frame-sbx-heidelpay-deprecated" type="host">https://sbx-payment.heidelpay.com</value>
51+
<value id="unzer-frame-4" type="host">https://sbx-payment.unzer.com</value>
52+
53+
<!-- ThreatMetrix -->
3254
<value id="threatmetrix" type="host">https://h.online-metrix.net</value>
55+
56+
<!-- Google Pay -->
3357
<value id="google-pay-1" type="host">https://google.com/pay</value>
3458
<value id="google-pay-2" type="host">https://pay.google.com/</value>
59+
<value id="hpcgw" type="host">https://test-heidelpay.hpcgw.net/</value>
60+
<value id="sbx" type="host">https://sbx-api.heidelpay.com/</value>
3561
</values>
3662
</policy>
63+
64+
<!-- FONT-SRC -->
3765
<policy id="font-src">
3866
<values>
3967
<value id="unzer-fonts-src" type="host">https://static.unzer.com</value>
4068
<value id="apple-font-src" type="host">https://applepay.cdn-apple.com</value>
4169
</values>
4270
</policy>
71+
72+
<!-- IMG-SRC -->
4373
<policy id="img-src">
4474
<values>
4575
<value id="unzer-img-src" type="host">https://static.unzer.com</value>
@@ -48,4 +78,4 @@
4878
</values>
4979
</policy>
5080
</policies>
51-
</csp_whitelist>
81+
</csp_whitelist>

‎etc/module.xml

+1-1
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
<?xml version="1.0"?>
22
<config xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
33
xsi:noNamespaceSchemaLocation="urn:magento:framework:Module/etc/module.xsd">
4-
<module name="Unzer_PAPI" setup_version="3.2.3">
4+
<module name="Unzer_PAPI" setup_version="3.2.4">
55
<sequence>
66
<module name="Magento_Checkout"/>
77
<module name="Magento_Config" />

0 commit comments

Comments
 (0)