Hey I’m creating a module with the “Payment” field to embed HubSpot Payment links. When I add this field, console shows a bunch of issues on the site frontend. It’s definitely tied to the payment field. Here’s what it shows:
32Refused to load the font ‘<URL>’ because it violates the following Content Security Policy directive: “font-src ‘none’”.
hubstyle.css:1
Failed to load resource: net::ERR_FAILED
24Refused to load the font ‘<URL>’ because it violates the following Content Security Policy directive: “default-src ‘self’”. Note that ‘font-src’ was not explicitly set, so ‘default-src’ is used as a fallback.8
[Report Only] Refused to load the font ‘<URL>’ because it violates the following Content Security Policy directive: “font-src ‘none’”.m.stripe.network/inner.html#url=https%3A%2F%2Fapp.hubspot.com%2Fpayments%2Fpurchase%2Fhscs_V7Vb3zkkqVJXltNP0s0YzMgx3sAvSF92OguMLdSKrpmuwYdqguealEduRgdf5ijm%3Fembed%3Dtrue%26hideOrderSummary%3Dtrue%26layout%3Dembed%26parentPageUrl%3Dhttps%253A%252F%252Fdonate.porchcommunities.org%252F-temporary-slug-e6a5ce78-bb4b-4df3-8687-d438583d994f%26hsVars%3D%257B%2522render_id%2522%253A%2522d6de31c6-e692-49e9-b458-0efadd74a500%2522%252C%2522ticks%2522%253A1731693735899%252C%2522page_id%2522%253A182745705993%252C%2522content_group_id%2522%253A0%252C%2522portal_id%2522%253A46366899%252C%2522app_hs_base_url%2522%253A%2522https%253A%252F%252Fapp.hubspot.com%2522%252C%2522cp_hs_base_url%2522%253A%2522https%253A%252F%252Fcp.hubspot.com%2522%252C%2522language%2522%253A%2522en%2522%252C%2522analytics_page_type%2522%253A%2522landing-page%2522%252C%2522scp_content_type%2522%253A%2522%2522%252C%2522analytics_page_id%2522%253A%2522182745705993%2522%252C%2522category_id%2522%253A1%252C%2522folder_id%2522%253A0%252C%2522is_hubspot_user%2522%253Afalse%257D%26parentHubspotUtk%3D5a4b7b11c0d8810efb372041d75eb17f&title=Checkout%20with%20PORCH%20Communities&referrer=https%3A%2F%2Fdonate.porchcommunities.org%2F-temporary-slug-e6a5ce78-bb4b-4df3-8687-d438583d994f%3Fhs_preview%3DwZjLrCkG-182745705993&muid=NA&sid=NA&version=6&preview=false:1
Refused to load the font ‘https://static.hsappstatic.net/ui-fonts/static-1.288/fonts/LexendDeca-Light.woff2’ because it violates the following Content Security Policy directive: “font-src https://m.stripe.network https://fonts.gstatic.com”.m.stripe.network/inner.html#url=https%3A%2F%2Fapp.hubspot.com%2Fpayments%2Fpurchase%2Fhscs_V7Vb3zkkqVJXltNP0s0YzMgx3sAvSF92OguMLdSKrpmuwYdqguealEduRgdf5ijm%3Fembed%3Dtrue%26hideOrderSummary%3Dtrue%26layout%3Dembed%26parentPageUrl%3Dhttps%253A%252F%252Fdonate.porchcommunities.org%252F-temporary-slug-e6a5ce78-bb4b-4df3-8687-d438583d994f%26hsVars%3D%257B%2522render_id%2522%253A%2522d6de31c6-e692-49e9-b458-0efadd74a500%2522%252C%2522ticks%2522%253A1731693735899%252C%2522page_id%2522%253A182745705993%252C%2522content_group_id%2522%253A0%252C%2522portal_id%2522%253A46366899%252C%2522app_hs_base_url%2522%253A%2522https%253A%252F%252Fapp.hubspot.com%2522%252C%2522cp_hs_base_url%2522%253A%2522https%253A%252F%252Fcp.hubspot.com%2522%252C%2522language%2522%253A%2522en%2522%252C%2522analytics_page_type%2522%253A%2522landing-page%2522%252C%2522scp_content_type%2522%253A%2522%2522%252C%2522analytics_page_id%2522%253A%2522182745705993%2522%252C%2522category_id%2522%253A1%252C%2522folder_id%2522%253A0%252C%2522is_hubspot_user%2522%253Afalse%257D%26parentHubspotUtk%3D5a4b7b11c0d8810efb372041d75eb17f&title=Checkout%20with%20PORCH%20Communities&referrer=https%3A%2F%2Fdonate.porchcommunities.org%2F-temporary-slug-e6a5ce78-bb4b-4df3-8687-d438583d994f%3Fhs_preview%3DwZjLrCkG-182745705993&muid=NA&sid=NA&version=6&preview=false:1
Refused to load the font ‘https://static.hsappstatic.net/ui-fonts/static-1.288/fonts/LexendDeca-Medium.woff2’ because it violates the following Content Security Policy directive: “font-src https://m.stripe.network https://fonts.gstatic.com”.m.stripe.network/inner.html#url=https%3A%2F%2Fapp.hubspot.com%2Fpayments%2Fpurchase%2Fhscs_V7Vb3zkkqVJXltNP0s0YzMgx3sAvSF92OguMLdSKrpmuwYdqguealEduRgdf5ijm%3Fembed%3Dtrue%26hideOrderSummary%3Dtrue%26layout%3Dembed%26parentPageUrl%3Dhttps%253A%252F%252Fdonate.porchcommunities.org%252F-temporary-slug-e6a5ce78-bb4b-4df3-8687-d438583d994f%26hsVars%3D%257B%2522render_id%2522%253A%2522d6de31c6-e692-49e9-b458-0efadd74a500%2522%252C%2522ticks%2522%253A1731693735899%252C%2522page_id%2522%253A182745705993%252C%2522content_group_id%2522%253A0%252C%2522portal_id%2522%253A46366899%252C%2522app_hs_base_url%2522%253A%2522https%253A%252F%252Fapp.hubspot.com%2522%252C%2522cp_hs_base_url%2522%253A%2522https%253A%252F%252Fcp.hubspot.com%2522%252C%2522language%2522%253A%2522en%2522%252C%2522analytics_page_type%2522%253A%2522landing-page%2522%252C%2522scp_content_type%2522%253A%2522%2522%252C%2522analytics_page_id%2522%253A%2522182745705993%2522%252C%2522category_id%2522%253A1%252C%2522folder_id%2522%253A0%252C%2522is_hubspot_user%2522%253Afalse%257D%26parentHubspotUtk%3D5a4b7b11c0d8810efb372041d75eb17f&title=Checkout%20with%20PORCH%20Communities&referrer=https%3A%2F%2Fdonate.porchcommunities.org%2F-temporary-slug-e6a5ce78-bb4b-4df3-8687-d438583d994f%3Fhs_preview%3DwZjLrCkG-182745705993&muid=NA&sid=NA&version=6&preview=false:1
Refused to load the font ‘https://static.hsappstatic.net/ui-fonts/static-1.288/fonts/LexendDeca-SemiBold.woff2’ because it violates the following Content Security Policy directive: “font-src https://m.stripe.network https://fonts.gstatic.com”.m.stripe.network/inner.html#url=https%3A%2F%2Fapp.hubspot.com%2Fpayments%2Fpurchase%2Fhscs_V7Vb3zkkqVJXltNP0s0YzMgx3sAvSF92OguMLdSKrpmuwYdqguealEduRgdf5ijm%3Fembed%3Dtrue%26hideOrderSummary%3Dtrue%26layout%3Dembed%26parentPageUrl%3Dhttps%253A%252F%252Fdonate.porchcommunities.org%252F-temporary-slug-e6a5ce78-bb4b-4df3-8687-d438583d994f%26hsVars%3D%257B%2522render_id%2522%253A%2522d6de31c6-e692-49e9-b458-0efadd74a500%2522%252C%2522ticks%2522%253A1731693735899%252C%2522page_id%2522%253A182745705993%252C%2522content_group_id%2522%253A0%252C%2522portal_id%2522%253A46366899%252C%2522app_hs_base_url%2522%253A%2522https%253A%252F%252Fapp.hubspot.com%2522%252C%2522cp_hs_base_url%2522%253A%2522https%253A%252F%252Fcp.hubspot.com%2522%252C%2522language%2522%253A%2522en%2522%252C%2522analytics_page_type%2522%253A%2522landing-page%2522%252C%2522scp_content_type%2522%253A%2522%2522%252C%2522analytics_page_id%2522%253A%2522182745705993%2522%252C%2522category_id%2522%253A1%252C%2522folder_id%2522%253A0%252C%2522is_hubspot_user%2522%253Afalse%257D%26parentHubspotUtk%3D5a4b7b11c0d8810efb372041d75eb17f&title=Checkout%20with%20PORCH%20Communities&referrer=https%3A%2F%2Fdonate.porchcommunities.org%2F-temporary-slug-e6a5ce78-bb4b-4df3-8687-d438583d994f%3Fhs_preview%3DwZjLrCkG-182745705993&muid=NA&sid=NA&version=6&preview=false:1
Refused to load the font ‘https://static.hsappstatic.net/ui-fonts/static-1.288/fonts/LexendDeca-Bold.woff2’ because it violates the following Content Security Policy directive: “font-src https://m.stripe.network https://fonts.gstatic.com”.
Any thoughts here? This portal has no added domain security settings in place, so the CSP isn’t coming from this site.
Hi @NathanAtGrowth ,
From the error as i can see you are trying to load the font from a cdn or somewhere and due to content policy its not allowing to do so .
Can you try to remove that so that we can get the Cause.
No, I’m not loading any fonts.
1) This is a new portal.
2) There is nothing being loaded in the domain settings area for fonts or any other scripts.
3) The theme is not loading any fonts except what is set in the settings, which is Raleway.
4) Nothing else has been done here except adding this module with the payment integration. If I remove the payment piece, all of the console errors go away.
I also switched the page to use the core “Growth” theme and all of the same console errors remained. There has to be something tied to the payments script from the HubSpot Payments link.