PayPal客户端在Scala Play中的实现问题
PayPal客户端在Scala Play中的实现问题
提问于 2019-03-15 03:10:04
我正在尝试使用Webjar在Play Scala模板中实现PayPal结帐按钮。这是sbt中的定义：
"org.webjars" %% "webjars-play"% "2.6.1",
"org.webjars"% "bootstrap"% "4.2.1" exclude ("org.webjars", "jquery"),
"org.webjars"% "jquery"% "3.2.1",这是模板中的导入：
@import org.webjars.play.WebJarsUtil我还包括了jQuery、Popper.js和bootstrap javaScript插件脚本。
以下html在浏览器中运行良好：
<!DOCTYPE html>
<html>
<!DOCTYPE html>
<head>
<meta name="viewport" content="width=device-width, initial-scale=1">
<meta http-equiv="X-UA-Compatible" content="IE=edge" />
<script
src="https://www.paypal.com/sdk/js?client-id=sb">
</script>
</head>
<body>
<div id="paypal-button-container"></div>
<script>
paypal.Buttons().render('#paypal-button-container');
</script>
</body>
</html>但是它不能在play模板中呈现感谢您帮助解决这个问题
Krzysztof，通过以下修改播放配置解决了问题：
# Security Filter Configuration - Content Security Policy
play.filters.headers {
contentSecurityPolicy = "default-src 'self' * .paypal.com;"
contentSecurityPolicy = $ {play.filters.headers.contentSecurityPolicy} "img-src 'self' data: * .fbcdn.net * .twimg.com * .googleusercontent.com * .xingassets.com vk.com * .yimg.com secure .gravatar.com; "
contentSecurityPolicy = $ {play.filters.headers.contentSecurityPolicy} "style-src 'self' 'unsafe-inline' cdnjs.cloudflare.com maxcdn.bootstrapcdn.com cdn.jsdelivr.net fonts.googleapis.com;"
contentSecurityPolicy = $ {play.filters.headers.contentSecurityPolicy} "font-src 'self' fonts.gstatic.com fonts.googleapis.com cdnjs.cloudflare.com;"
contentSecurityPolicy = $ {play.filters.headers.contentSecurityPolicy} "script-src 'self' 'unsafe-inline' 'unsafe-eval' cdnjs.cloudflare.com * .paypal.com;"
contentSecurityPolicy = $ {play.filters.headers.contentSecurityPolicy} "connect-src 'self' twitter.com * .xing.com * .paypal.com;"谢谢你。
我还想从Play 2.6.11迁移到Play 2.7.0。然而，在包含插件和Requirejs的依赖项之后，我在执行过程中得到了以下错误：
ProvisionException: Unable to provision, see the following errors: 1) Error injecting constructor, java.lang.AbstractMethodError: Method org / webjars / play / RequireJS.play $ api $ mvc $ Results $ _setter_ $ PreconditionRequired_ $ eq (Lplay / api / mvc / Results $ Status;) V is abstract at org.webjars.play.RequireJS. <init> (RequireJS.scala: 9) at org.webjars.play.RequireJS.class (RequireJS.scala: 9) while locating org. webjars.play.RequireJS for the 2nd parameter of webjars.Routes. <init> (Routes.scala: .........我想知道会有什么困难谢谢你
回答 1
Stack Overflow用户
发布于 2019-03-16 18:53:37
你的问题是由你的play应用中的CspFilter引起的。如果你使用的是play 2.7或更高版本，你可以将csp nonce添加到你要添加到页面的每个脚本中。假设这是您的模板：
@* At the beggining import CSPNonce *@
@import views.html.helper.CSPNonce
@* It's important that you pass implicit request to your view, without script won't compile *@
@(title: String)(content: Html)(implicit request: RequestHeader)
<!DOCTYPE html>
<html lang="en">
<head>
@* Adding @{CSPNonce.attr} would generate nonce for external script *@
<script @{CSPNonce.attr} src="https://www.paypal.com/sdk/js?client-id=sb"></script>
</head>
<body>
<div id="paypal-button-container"></div>
@* Adding @{CSPNonce.attr} would generate nonce for inline script *@
<script @{CSPNonce.attr}>
paypal.Buttons().render('#paypal-button-container');
</script>
</body>
</html>在play 2.6和之前的版本中，没有实现随机数，所以你必须自己实现它，或者允许在没有随机数的情况下计算内联脚本。
play.filters.headers.contentSecurityPolicy = "default-src 'self'; script-src 'self' 'unsafe-inline' https://www.paypal.com"页面原文内容由Stack Overflow提供。腾讯云小微IT领域专用引擎提供翻译支持
原文链接：
https://stackoverflow.com/questions/55170319
复制相关文章
相似问题