We’ve recently implemented the Accept Hosted Payment Page (in an iFrame) on a test version of our client’s site, and it’s working great everywhere except on Chrome browsers in Windows. The payment page loads OK, but after filling in all the fields and clicking the payment button, I see the button changes to “Processing…” and the payment goes through to the sandbox merchant account OK, but the page just hangs there instead of going to the next step in the transactResponse case. We initially discovered this console error...
Uncaught DOMException: Blocked a frame with IFrameCommunicator.html:27 origin "https://www.vtfwdsales.com” from accessing a cross-origin frame. at callParentFunction (https://www.vtfwdsales.com/online_test/IFrameCommunicator.html:27:28) at receiveMessage (https://www.vtfwdsales.com/online_test/IFrameCommunicator.html:33:6)
I then tried a solution that I found where others had resolved a similar issue. Sorry, I wanted to include the link here, but I'm not finding it now. The fix in that case was adding this to .htaccess...
Header set Content-Security-Policy "frame-ancestors 'self' *.vtfwdsales.com *.authorize.net"
We continue to have the same issue with the page hanging, but the console message has changed to...
Refused to frame 'https://www.vtfwdsales.com/' because an ancestor violates the following Content Security Policy directive: "frame-ancestors 'self' *.vtfwdsales.com *.authorize.net".
Any help is greatly appreciated. Let me know if you would like me to provide any other details.
10-16-2023 01:33 PM