[ISSUE] CSP Error with inline script

[simonmaass]

Describe the bug
Mollie Inline Script error due to Content Security Policy with inline script

Refused to execute inline script because it violates the following Content Security Policy directive: "script-src

Used versions

• Magento Version number(eg 2.3.5): 2.4.7-p1
• Open source/Enterprise/B2b: OS
• Mollie version number (Check configuration): 3.40.0

To Reproduce
Steps to reproduce the behavior:
1.)Create new Order
2.) Open Console

Expected behavior
A clear and concise description of what you expected to happen.

Actual behavior
A clear and concise description of what actually happens.

Screenshots
If applicable, add screenshots to help explain your problem.

Additional context
The following script fails:

<script>
                                document.addEventListener('DOMContentLoaded', function() {
                                    const saveSelectedMethods = ()=>{
                                        // Save the selected payment methods to local storage
                                        var paymentMethods = document.getElementById('mollie_methods_paymentlink_methods');
                                        if (!paymentMethods) {
                                            return;
                                        }

                                        paymentMethods.addEventListener('change', function() {
                                            var selected = [];
                                            for (var i = 0; i < paymentMethods.options.length; i++) {
                                                if (paymentMethods.options[i].selected) {
                                                    selected.push(paymentMethods.options[i].value);
                                                }
                                            }
                                            localStorage.setItem('mollie_paymentlink_methods', JSON.stringify(selected));
                                        });
                                    }
                                    ;

                                    const setSelectedMethods = ()=>{
                                        var paymentMethods = document.getElementById('mollie_methods_paymentlink_methods');
                                        const selectedMethods = JSON.parse(localStorage.getItem('mollie_paymentlink_methods'));
                                        if (!selectedMethods || !paymentMethods) {
                                            return;
                                        }

                                        for (var i = 0; i < paymentMethods.options.length; i++) {
                                            if (selectedMethods.indexOf(paymentMethods.options[i].value) !== -1) {
                                                paymentMethods.options[i].selected = true;
                                            }
                                        }
                                    }
                                    ;

                                    saveSelectedMethods();
                                    setSelectedMethods();

                                    document.getElementById('order-billing_method').addEventListener('DOMSubtreeModified', ()=>{
                                        saveSelectedMethods();
                                        setSelectedMethods();
                                    }
                                    )
                                });
                            </script>

[Frank-Magmodules]

Same for this one, @simonmaass. Thanks for sharing this improvement. This will also be included in the upcoming release!

[Frank-Magmodules]

Good evening @simonmaass , We’re happy to let you know that we’ve just launched version 2.40.1 of the plugin, which addresses the issue you described. Thank you for bringing this to our attention. I’m closing the issue now, but as always, feel free to reopen it if needed.