Forbidden: Content Security Policy base-uri self

[Jeffrey de Bruijn]

Hi, I have migrated to a new server, with the migration I took the chance to upgrade OS and PHP versions.

I am now on PHP 8.1.14, I have "fixed" the installation with core updater.

It seems like the PayPal module is not working any more though, with the only option I use (Website Payments Plus) am getting a forbidden iframe with the following error:

Failed to load resource: the server responded with a status of 403 ()
Refused to set the document's base URI to 'https://www.paypalobjects.com/web/res/956/47fb6d7...' because it violates the following Content Security Policy directive: "base-uri 'self' https://*.paypal.com".

Is this related to the version or was the plugin broken already and I didn't notice?

Since PayPal deprecated Website Payments Standard and has a new SDK out, is there a viable alternative plugin to use?

Edited May 13, 2023 by Jeffrey de Bruijn