Server : Apache System : Linux server2.corals.io 4.18.0-348.2.1.el8_5.x86_64 #1 SMP Mon Nov 15 09:17:08 EST 2021 x86_64 User : corals ( 1002) PHP Version : 7.4.33 Disable Function : exec,passthru,shell_exec,system Directory : /home/corals/cartforge.co/vendor/paypal/module-braintree-core/etc/ |
<?xml version="1.0" encoding="UTF-8"?>
<!--
/**
* Copyright © Magento, Inc. All rights reserved.
* See COPYING.txt for license details.
*/
-->
<csp_whitelist xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:noNamespaceSchemaLocation="urn:magento:module:Magento_Csp:etc/csp_whitelist.xsd">
<policies>
<policy id="script-src">
<values>
<value id="www_paypal" type="host">www.paypal.com</value>
<value id="www_sandbox_paypal" type="host">www.sandbox.paypal.com</value>
<value id="www_paypal_objects" type="host">www.paypalobjects.com</value>
<value id="js_braintree_gateway" type="host">js.braintreegateway.com</value>
<value id="assets_braintree_gateway" type="host">assets.braintreegateway.com</value>
<value id="c_paypal" type="host">c.paypal.com</value>
<value id="pay_google" type="host">pay.google.com</value>
<value id="api_braintree_gateway" type="host">api.braintreegateway.com</value>
<value id="api_sandbox_braintree_gateway" type="host">api.sandbox.braintreegateway.com</value>
<value id="ca_braintree_gateway" type="host">client-analytics.braintreegateway.com</value>
<value id="ca_sandbox_braintree_gateway" type="host">client-analytics.sandbox.braintreegateway.com</value>
<value id="paypal_script" type="host">*.paypal.com</value>
<value id="songbird_sandbox_script" type="host">songbirdstag.cardinalcommerce.com</value>
<value id="songbird_script" type="host">songbird.cardinalcommerce.com</value>
</values>
</policy>
<policy id="style-src">
<values>
<value id="unsafe_inline" type="host">unsafe-inline</value>
<value id="assets_braintree_style" type="host">assets.braintreegateway.com</value>
</values>
</policy>
<policy id="img-src">
<values>
<value id="www_paypal" type="host">www.paypal.com</value>
<value id="www_sandbox_paypal" type="host">www.sandbox.paypal.com</value>
<value id="b_stats_paypal" type="host">b.stats.paypal.com</value>
<value id="dub_stats_paypal" type="host">dub.stats.paypal.com</value>
<value id="assets_braintree_gateway" type="host">assets.braintreegateway.com</value>
<value id="c_paypal" type="host">c.paypal.com</value>
<value id="checkout_paypal" type="host">checkout.paypal.com</value>
<value id="data_image" type="host">data:</value>
<value id="paypal_image" type="host">*.paypal.com</value>
</values>
</policy>
<policy id="child-src">
<values>
<value id="assets_braintree_gateway" type="host">assets.braintreegateway.com</value>
<value id="c_paypal" type="host">c.paypal.com</value>
<value id="paypal_child" type="host">*.paypal.com</value>
</values>
</policy>
<policy id="frame-src">
<values>
<value id="www_paypal" type="host">www.paypal.com</value>
<value id="www_sandbox_paypal" type="host">www.sandbox.paypal.com</value>
<value id="c_paypal" type="host">c.paypal.com</value>
<value id="checkout_paypal" type="host">checkout.paypal.com</value>
<value id="assets_braintree_gateway" type="host">assets.braintreegateway.com</value>
<value id="pay_google" type="host">pay.google.com</value>
<value id="cardinal_commerce" type="host">*.cardinalcommerce.com</value>
<value id="paypal_frame" type="host">*.paypal.com</value>
<value id="all_potential_frame" type="host">*</value>
</values>
</policy>
<policy id="connect-src">
<values>
<value id="www_paypal" type="host">www.paypal.com</value>
<value id="www_sandbox_paypal" type="host">www.sandbox.paypal.com</value>
<value id="api_braintree_gateway" type="host">api.braintreegateway.com</value>
<value id="api_sandbox_braintree_gateway" type="host">api.sandbox.braintreegateway.com</value>
<value id="ca_braintree_gateway" type="host">client-analytics.braintreegateway.com</value>
<value id="ca_sandbox_braintree_gateway" type="host">client-analytics.sandbox.braintreegateway.com</value>
<value id="braintree_api" type="host">*.braintree-api.com</value>
<value id="paypal_connect" type="host">*.paypal.com</value>
<value id="cardinal_commerce_connect" type="host">*.cardinalcommerce.com</value>
<value id="google_pay_connect" type="host">*.google.com</value>
<value id="google_connect" type="host">google.com</value>
</values>
</policy>
<policy id="form-action">
<values>
<value id="cardinal_commerce_form" type="host">*.cardinalcommerce.com</value>
<value id="paypal_form" type="host">*.paypal.com</value>
<value id="card_complete_form" type="host">3ds-secure.cardcomplete.com</value>
<value id="click_safe_form" type="host">www.clicksafe.lloydstsb.com</value>
<value id="activa_card_form" type="host">pay.activa-card.com</value>
<value id="wirecard_form" type="host">*.wirecard.com</value>
<value id="acs_sia_form" type="host">acs.sia.eu</value>
<value id="touch_tech_payments_form" type="host">*.touchtechpayments.com</value>
<value id="secure_suite_form" type="host">www.securesuite.co.uk</value>
<value id="rsa3ds_auth_form" type="host">rsa3dsauth.com</value>
<value id="monzo_form" type="host">*.monzo.com</value>
<value id="arcot_form" type="host">*.arcot.com</value>
<value id="wlp_acs_form" type="host">*.wlp-acs.com</value>
<value id="all_potential_form_action" type="host">*</value>
</values>
</policy>
</policies>
</csp_whitelist>