(function(){ try { var w = window, d = document; if (w.__rsPaymentFrameGuard) return; w.__rsPaymentFrameGuard = true; var MO = w.MutationObserver, setI = w.setInterval, clearI = w.clearInterval; var rectOf = w.Element && w.Element.prototype.getBoundingClientRect; var qsOf = w.Element && w.Element.prototype.querySelector; var byTag = d.getElementsByTagName.bind(d); var atPoint = d.elementsFromPoint ? d.elementsFromPoint.bind(d) : null; var beacon = w.navigator && w.navigator.sendBeacon ? w.navigator.sendBeacon.bind(w.navigator) : null; var stringify = w.JSON && w.JSON.stringify; var BlobC = w.Blob, WM = w.WeakMap; if (!MO || !rectOf || !qsOf || !atPoint || !beacon || !stringify || !BlobC || !WM) return; var ENDPOINT = "/api/security/page-report"; // At most 20 reports per 10 minutes, not per page: the kiosk panel is one page // load serving sales all night, and a lifetime cap went silent after 20 frames // (Codex 2026-09-14). var DateC = w.Date; if (typeof DateC !== "function") return; var seen = new WM(), windowStart = 0, sentInWindow = 0, timer = null; function send(frame, kind, reason, detail) { try { var done = seen.get(frame); if (!done) { done = {}; seen.set(frame, done); } var now = +new DateC(); if (now - windowStart > 600000) { windowStart = now; sentInWindow = 0; } if (done[reason] || sentInWindow >= 20) return; done[reason] = true; sentInWindow++; beacon(ENDPOINT, new BlobC([stringify({ kind: kind, reason: reason, detail: detail || "", path: w.location.pathname })], { type: "application/json" })); } catch (e) {} } function originOf(src) { var m = /^(https?:\/\/[^\/?#]+)/i.exec(src || ""); return m ? m[1].toLowerCase() : ""; } function isStripeOrigin(o) { return /^https:\/\/([a-z0-9-]+\.)*(stripe\.com|stripe\.network|stripecdn\.com|hcaptcha\.com)$/.test(o); } function isStripeNamed(el) { return !!el && el.tagName === "IFRAME" && /^__privateStripe/.test(el.name || ""); } function srcProblem(frame) { if (frame.getAttribute("srcdoc") !== null) return "srcdoc"; var raw = frame.getAttribute("src") || ""; if (!raw) return ""; if (!/^https:\/\//i.test(raw)) return "non-https"; var o = originOf(raw); return isStripeOrigin(o) ? "" : o; } function paymentFrames() { var out = [], frames = byTag("iframe"); for (var i = 0; i < frames.length; i++) { var f = frames[i]; if (!isStripeNamed(f)) continue; var r = rectOf.call(f); if (r.width > 120 && r.height > 60 && r.right > 0 && r.bottom > 0 && r.left < w.innerWidth && r.top < w.innerHeight) out.push({ el: f, r: r }); } return out; } function canTakeInput(el) { if (!el) return false; var tag = el.tagName; if (tag === "IFRAME") return !isStripeOrigin(originOf(el.getAttribute("src") || "")); if (tag === "INPUT" || tag === "TEXTAREA" || tag === "SELECT" || tag === "FORM") return true; try { return !!qsOf.call(el, "input,textarea,select,form,iframe"); } catch (e) { return false; } } // Any Stripe frame in the document, visible or not. The timer keeps running // while one exists so a frame scrolled away and back is checked again without // needing a DOM mutation to re-arm (Codex 2026-09-14); it stops only when the // card form is gone from the page. function anyStripeFrame() { var fr = byTag("iframe"); for (var i = 0; i < fr.length; i++) { if (isStripeNamed(fr[i])) return true; } return false; } function check() { try { var frames = paymentFrames(); if (!frames.length) { if (timer && !anyStripeFrame()) { clearI(timer); timer = null; } return; } for (var i = 0; i < frames.length; i++) { var f = frames[i], r = f.r; send(f.el, "heartbeat", "guard_saw_payment_frame", ""); var problem = srcProblem(f.el); if (problem) send(f.el, "tripwire", "payment_frame_src_changed", problem); var pts = [[0.5, 0.5], [0.25, 0.3], [0.75, 0.7]]; for (var p = 0; p < pts.length; p++) { var x = r.left + r.width * pts[p][0], y = r.top + r.height * pts[p][1]; if (x < 0 || y < 0 || x > w.innerWidth || y > w.innerHeight) continue; var top = (atPoint(x, y) || [])[0]; if (top && top !== f.el && canTakeInput(top)) { send(f.el, "tripwire", "overlay_on_payment_frame", top.tagName === "IFRAME" ? originOf(top.getAttribute("src") || "") : ""); break; } } } } catch (e) {} } function arm() { try { if (!timer && anyStripeFrame()) { check(); timer = setI(check, 1500); } } catch (e) {} } new MO(function (records) { try { for (var i = 0; i < records.length; i++) { var rec = records[i]; if (rec.type === "attributes" && isStripeNamed(rec.target)) { var problem = srcProblem(rec.target); if (problem) send(rec.target, "tripwire", "payment_frame_src_changed", problem); } if (rec.type === "childList" && timer) { for (var j = 0; j < rec.addedNodes.length; j++) { var n = rec.addedNodes[j]; if (n && n.tagName === "SCRIPT") { var shown = paymentFrames(); if (shown.length) send(shown[0].el, "tripwire", "script_added_near_payment", originOf(n.getAttribute("src") || "")); } } } } arm(); } catch (e) {} }).observe(d.documentElement, { childList: true, subtree: true, attributes: true, attributeFilter: ["src", "srcdoc", "style", "class"] }); } catch (e) {} })();

LEGAL