Fix Paystack Fullscreen permission policy for Inline iframes.

Pre-set allow=fullscreen on Paystack iframes before navigation (createElement hook + MutationObserver on allow/src/id), re-apply if Paystack overwrites allow, and send Permissions-Policy HTTP headers so checkout.paystack.com can use fullscreen inside the in-app sheet.
2026-07-21 22:17:14 +00:00
parent 4291d95518
commit bd8764523c
5 changed files with 166 additions and 22 deletions
@@ -17,7 +17,8 @@
    <meta charset="utf-8">
    <meta name="viewport" content="width=device-width, initial-scale=1, viewport-fit=cover">
    <meta name="csrf-token" content="{{ $csrf }}">
-    <meta http-equiv="Permissions-Policy" content="payment=(self &quot;https://checkout.paystack.com&quot;), fullscreen=(self &quot;https://checkout.paystack.com&quot;), clipboard-read=(self &quot;https://checkout.paystack.com&quot;), clipboard-write=(self &quot;https://checkout.paystack.com&quot;)">
+    {{-- Permissions-Policy for Paystack is set as an HTTP header (middleware + nginx).
+         Meta http-equiv is not reliably applied by browsers for this feature. --}}
    <title>Pay {{ $businessName }}</title>
    <link rel="preconnect" href="https://fonts.bunny.net">
    <link href="https://fonts.bunny.net/css?family=figtree:400,500,600,700&display=swap" rel="stylesheet" />