Skip to content

@checkout-kit/runtime-browser / PaymentUrlPolicy

Interface: PaymentUrlPolicy ​

Transport and destination rules for addresses received from a payment API.

Properties ​

PropertyModifierTypeDescription
allowInsecureLocalhost?readonlybooleanDevelopment only: permit HTTP on localhost, 127.0.0.1 and [::1].
deeplinkProtocols?readonlyreadonly string[]Custom bank app schemes, including the colon, e.g. ['bankapp:']. HTTPS always works.
frameOrigins?readonlyreadonly string[]Omit to allow HTTPS hosted fields. Use exact origins, without paths or wildcards.
imageOrigins?readonlyreadonly string[]-
redirectOrigins?readonlyreadonly string[]Omit to allow HTTPS ACS/provider origins. An empty list denies all redirects.
scriptOrigins?readonlyreadonly string[]Action-supplied scripts are denied unless their exact origin is listed here.

Apache-2.0 · Headless engine, provider adapters and runnable examples.