migrating from Microform v1 OR v0.11 to v2

smanick — Mon, 06 Jan 2025 21:37:54 GMT

I am following this knowledge article -

When i call flex javascript library by below script tag by passing "integrity" and "crossorigin" attributes, scripts are blocked with below error.

src="https://testflex.cybersource.com/microform/bundle/v2.0.2/flex-microform.min.js" integrity="sha256-4TUKBd3VMIGGNs1ZLzfU6bG0YG4kUScSOtPu5ec7Ygo=" crossorigin="anonymous"

Subresource Integrity: The resource 'https://testflex.cybersource.com/microform/bundle/v2.0.2/flex-microform.min.js' has an integrity attribute, but the resource requires the request to be CORS enabled to check the integrity, and it is not. The resource has been blocked because the integrity cannot be enforced.

Does that mean cybersource have to enable CORS on the resource? could anyone please help on this issue.

Re: migrating from Microform v1 OR v0.11 to v2

OlegO — Tue, 28 Jan 2025 13:52:25 GMT

We fixed the issue by changing/adding Сross-Origin-Embedder-Policy response header to unsafe-none for our e-commerce website.