# Payments field in module

**URL:** <https://community.hubspot.com/t/payments-field-in-module/120646>\
**Category:** CMS Development\
**Created:** [November 15, 2024, 6:23pm UTC](https://community.hubspot.com/t/payments-field-in-module/120646 "2024-11-15T18:23:00Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![NathanHubsHelp](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/nathanhubshelp/32/17073_2.png) [@NathanHubsHelp](https://community.hubspot.com/u/NathanHubsHelp)\
**Post date:** [November 15, 2024, 6:23pm UTC](https://community.hubspot.com/t/payments-field-in-module/120646/1 "2024-11-15T18:23:00Z")

</div>

Hey I’m creating a module with the “Payment” field to embed HubSpot Payment links. When I add this field, console shows a bunch of issues on the site frontend. It’s definitely tied to the payment field. Here’s what it shows:  
32Refused to load the font ‘\<URL\>’ because it violates the following Content Security Policy directive: “font-src ‘none’”.  
hubstyle.css:1  
Failed to load resource: net::ERR\_FAILED  
24Refused to load the font ‘\<URL\>’ because it violates the following Content Security Policy directive: “default-src ‘self’”. Note that ‘font-src’ was not explicitly set, so ‘default-src’ is used as a fallback.8  
[Report Only] Refused to load the font ‘\<URL\>’ because it violates the following Content Security Policy directive: “font-src ‘none’”.m.stripe.network/inner.html#url=https%3A%2F%[2Fapp.hubspot.com](http://2fapp.hubspot.com/)%2Fpayments%2Fpurchase%2Fhscs\_V7Vb3zkkqVJXltNP0s0YzMgx3sAvSF92OguMLdSKrpmuwYdqguealEduRgdf5ijm%3Fembed%3Dtrue%26hideOrderSummary%3Dtrue%26layout%3Dembed%26parentPageUrl%3Dhttps%253A%252F%[252Fdonate.porchcommunities.org](http://252fdonate.porchcommunities.org/)%252F-temporary-slug-e6a5ce78-bb4b-4df3-8687-d438583d994f%26hsVars%3D%257B%2522render\_id%2522%253A%2522d6de31c6-e692-49e9-b458-0efadd74a500%2522%252C%2522ticks%2522%253A1731693735899%252C%2522page\_id%2522%253A182745705993%252C%2522content\_group\_id%2522%253A0%252C%2522portal\_id%2522%253A46366899%252C%2522app\_hs\_base\_url%2522%253A%2522https%253A%252F%[252Fapp.hubspot.com](http://252fapp.hubspot.com/)%2522%252C%2522cp\_hs\_base\_url%2522%253A%2522https%253A%252F%[252Fcp.hubspot.com](http://252fcp.hubspot.com/)%2522%252C%2522language%2522%253A%2522en%2522%252C%2522analytics\_page\_type%2522%253A%2522landing-page%2522%252C%2522scp\_content\_type%2522%253A%2522%2522%252C%2522analytics\_page\_id%2522%253A%2522182745705993%2522%252C%2522category\_id%2522%253A1%252C%2522folder\_id%2522%253A0%252C%2522is\_hubspot\_user%2522%253Afalse%257D%26parentHubspotUtk%3D5a4b7b11c0d8810efb372041d75eb17f&title=Checkout%20with%20PORCH%20Communities&referrer=https%3A%2F%[2Fdonate.porchcommunities.org](http://2fdonate.porchcommunities.org/)%2F-temporary-slug-e6a5ce78-bb4b-4df3-8687-d438583d994f%3Fhs\_preview%3DwZjLrCkG-182745705993&muid=NA&sid=NA&version=6&preview=false:1  
Refused to load the font ‘[https://static.hsappstatic.net/ui-fonts/static-1.288/fonts/LexendDeca-Light.woff2](https://static.hsappstatic.net/ui-fonts/static-1.288/fonts/LexendDeca-Light.woff2)’ because it violates the following Content Security Policy directive: “font-src [https://m.stripe.network](https://m.stripe.network/) [https://fonts.gstatic.com](https://fonts.gstatic.com/)”.m.stripe.network/inner.html#url=https%3A%2F%[2Fapp.hubspot.com](http://2fapp.hubspot.com/)%2Fpayments%2Fpurchase%2Fhscs\_V7Vb3zkkqVJXltNP0s0YzMgx3sAvSF92OguMLdSKrpmuwYdqguealEduRgdf5ijm%3Fembed%3Dtrue%26hideOrderSummary%3Dtrue%26layout%3Dembed%26parentPageUrl%3Dhttps%253A%252F%[252Fdonate.porchcommunities.org](http://252fdonate.porchcommunities.org/)%252F-temporary-slug-e6a5ce78-bb4b-4df3-8687-d438583d994f%26hsVars%3D%257B%2522render\_id%2522%253A%2522d6de31c6-e692-49e9-b458-0efadd74a500%2522%252C%2522ticks%2522%253A1731693735899%252C%2522page\_id%2522%253A182745705993%252C%2522content\_group\_id%2522%253A0%252C%2522portal\_id%2522%253A46366899%252C%2522app\_hs\_base\_url%2522%253A%2522https%253A%252F%[252Fapp.hubspot.com](http://252fapp.hubspot.com/)%2522%252C%2522cp\_hs\_base\_url%2522%253A%2522https%253A%252F%[252Fcp.hubspot.com](http://252fcp.hubspot.com/)%2522%252C%2522language%2522%253A%2522en%2522%252C%2522analytics\_page\_type%2522%253A%2522landing-page%2522%252C%2522scp\_content\_type%2522%253A%2522%2522%252C%2522analytics\_page\_id%2522%253A%2522182745705993%2522%252C%2522category\_id%2522%253A1%252C%2522folder\_id%2522%253A0%252C%2522is\_hubspot\_user%2522%253Afalse%257D%26parentHubspotUtk%3D5a4b7b11c0d8810efb372041d75eb17f&title=Checkout%20with%20PORCH%20Communities&referrer=https%3A%2F%[2Fdonate.porchcommunities.org](http://2fdonate.porchcommunities.org/)%2F-temporary-slug-e6a5ce78-bb4b-4df3-8687-d438583d994f%3Fhs\_preview%3DwZjLrCkG-182745705993&muid=NA&sid=NA&version=6&preview=false:1  
Refused to load the font ‘[https://static.hsappstatic.net/ui-fonts/static-1.288/fonts/LexendDeca-Medium.woff2](https://static.hsappstatic.net/ui-fonts/static-1.288/fonts/LexendDeca-Medium.woff2)’ because it violates the following Content Security Policy directive: “font-src [https://m.stripe.network](https://m.stripe.network/) [https://fonts.gstatic.com](https://fonts.gstatic.com/)”.m.stripe.network/inner.html#url=https%3A%2F%[2Fapp.hubspot.com](http://2fapp.hubspot.com/)%2Fpayments%2Fpurchase%2Fhscs\_V7Vb3zkkqVJXltNP0s0YzMgx3sAvSF92OguMLdSKrpmuwYdqguealEduRgdf5ijm%3Fembed%3Dtrue%26hideOrderSummary%3Dtrue%26layout%3Dembed%26parentPageUrl%3Dhttps%253A%252F%[252Fdonate.porchcommunities.org](http://252fdonate.porchcommunities.org/)%252F-temporary-slug-e6a5ce78-bb4b-4df3-8687-d438583d994f%26hsVars%3D%257B%2522render\_id%2522%253A%2522d6de31c6-e692-49e9-b458-0efadd74a500%2522%252C%2522ticks%2522%253A1731693735899%252C%2522page\_id%2522%253A182745705993%252C%2522content\_group\_id%2522%253A0%252C%2522portal\_id%2522%253A46366899%252C%2522app\_hs\_base\_url%2522%253A%2522https%253A%252F%[252Fapp.hubspot.com](http://252fapp.hubspot.com/)%2522%252C%2522cp\_hs\_base\_url%2522%253A%2522https%253A%252F%[252Fcp.hubspot.com](http://252fcp.hubspot.com/)%2522%252C%2522language%2522%253A%2522en%2522%252C%2522analytics\_page\_type%2522%253A%2522landing-page%2522%252C%2522scp\_content\_type%2522%253A%2522%2522%252C%2522analytics\_page\_id%2522%253A%2522182745705993%2522%252C%2522category\_id%2522%253A1%252C%2522folder\_id%2522%253A0%252C%2522is\_hubspot\_user%2522%253Afalse%257D%26parentHubspotUtk%3D5a4b7b11c0d8810efb372041d75eb17f&title=Checkout%20with%20PORCH%20Communities&referrer=https%3A%2F%[2Fdonate.porchcommunities.org](http://2fdonate.porchcommunities.org/)%2F-temporary-slug-e6a5ce78-bb4b-4df3-8687-d438583d994f%3Fhs\_preview%3DwZjLrCkG-182745705993&muid=NA&sid=NA&version=6&preview=false:1  
Refused to load the font ‘[https://static.hsappstatic.net/ui-fonts/static-1.288/fonts/LexendDeca-SemiBold.woff2](https://static.hsappstatic.net/ui-fonts/static-1.288/fonts/LexendDeca-SemiBold.woff2)’ because it violates the following Content Security Policy directive: “font-src [https://m.stripe.network](https://m.stripe.network/) [https://fonts.gstatic.com](https://fonts.gstatic.com/)”.m.stripe.network/inner.html#url=https%3A%2F%[2Fapp.hubspot.com](http://2fapp.hubspot.com/)%2Fpayments%2Fpurchase%2Fhscs\_V7Vb3zkkqVJXltNP0s0YzMgx3sAvSF92OguMLdSKrpmuwYdqguealEduRgdf5ijm%3Fembed%3Dtrue%26hideOrderSummary%3Dtrue%26layout%3Dembed%26parentPageUrl%3Dhttps%253A%252F%[252Fdonate.porchcommunities.org](http://252fdonate.porchcommunities.org/)%252F-temporary-slug-e6a5ce78-bb4b-4df3-8687-d438583d994f%26hsVars%3D%257B%2522render\_id%2522%253A%2522d6de31c6-e692-49e9-b458-0efadd74a500%2522%252C%2522ticks%2522%253A1731693735899%252C%2522page\_id%2522%253A182745705993%252C%2522content\_group\_id%2522%253A0%252C%2522portal\_id%2522%253A46366899%252C%2522app\_hs\_base\_url%2522%253A%2522https%253A%252F%[252Fapp.hubspot.com](http://252fapp.hubspot.com/)%2522%252C%2522cp\_hs\_base\_url%2522%253A%2522https%253A%252F%[252Fcp.hubspot.com](http://252fcp.hubspot.com/)%2522%252C%2522language%2522%253A%2522en%2522%252C%2522analytics\_page\_type%2522%253A%2522landing-page%2522%252C%2522scp\_content\_type%2522%253A%2522%2522%252C%2522analytics\_page\_id%2522%253A%2522182745705993%2522%252C%2522category\_id%2522%253A1%252C%2522folder\_id%2522%253A0%252C%2522is\_hubspot\_user%2522%253Afalse%257D%26parentHubspotUtk%3D5a4b7b11c0d8810efb372041d75eb17f&title=Checkout%20with%20PORCH%20Communities&referrer=https%3A%2F%[2Fdonate.porchcommunities.org](http://2fdonate.porchcommunities.org/)%2F-temporary-slug-e6a5ce78-bb4b-4df3-8687-d438583d994f%3Fhs\_preview%3DwZjLrCkG-182745705993&muid=NA&sid=NA&version=6&preview=false:1  
Refused to load the font ‘[https://static.hsappstatic.net/ui-fonts/static-1.288/fonts/LexendDeca-Bold.woff2](https://static.hsappstatic.net/ui-fonts/static-1.288/fonts/LexendDeca-Bold.woff2)’ because it violates the following Content Security Policy directive: “font-src [https://m.stripe.network](https://m.stripe.network/) [https://fonts.gstatic.com](https://fonts.gstatic.com/)”.  
Any thoughts here? This portal has no added domain security settings in place, so the CSP isn’t coming from this site.

---

<div class="post-metadata">

**Author:** ![Bhupendra\_Kumar](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/bhupendra_kumar/32/67536_2.png) [@Bhupendra\_Kumar](https://community.hubspot.com/u/Bhupendra_Kumar)\
**Post date:** [November 16, 2024, 3:17pm UTC](https://community.hubspot.com/t/payments-field-in-module/120646/2 "2024-11-16T15:17:43Z")

</div>

Hi [@NathanAtGrowth](https://community.hubspot.com/t5/user/viewprofilepage/user-id/818104) ,

From the error as i can see you are trying to load the font from a cdn or somewhere and due to content policy its not allowing to do so .  
Can you try to remove that so that we can get the Cause.

---

<div class="post-metadata">

**Author:** ![NathanHubsHelp](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/nathanhubshelp/32/17073_2.png) [@NathanHubsHelp](https://community.hubspot.com/u/NathanHubsHelp)\
**Post date:** [November 18, 2024, 2:05pm UTC](https://community.hubspot.com/t/payments-field-in-module/120646/3 "2024-11-18T14:05:09Z")

</div>

No, I’m not loading any fonts.  
1) This is a new portal.  
2) There is nothing being loaded in the domain settings area for fonts or any other scripts.  
3) The theme is not loading any fonts except what is set in the settings, which is Raleway.  
4) Nothing else has been done here except adding this module with the payment integration. If I remove the payment piece, all of the console errors go away.

I also switched the page to use the core “Growth” theme and all of the same console errors remained. There has to be something tied to the payments script from the HubSpot Payments link.
