<story><title>Google Analytics is injected with Stripe.js when enabling Google Pay</title><url>https://twitter.com/jackellis/status/1576879802379751424</url></story><parent_chain></parent_chain><comment><author>ezekg</author><text>It sucks that even a good Content Security Policy [0] can&amp;#x27;t stop an iframe from making these types of requests.&lt;p&gt;[0]: &lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;developer.mozilla.org&amp;#x2F;en-US&amp;#x2F;docs&amp;#x2F;Web&amp;#x2F;HTTP&amp;#x2F;Headers&amp;#x2F;Content-Security-Policy&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;developer.mozilla.org&amp;#x2F;en-US&amp;#x2F;docs&amp;#x2F;Web&amp;#x2F;HTTP&amp;#x2F;Headers&amp;#x2F;Co...&lt;/a&gt;</text></comment>
<story><title>Google Analytics is injected with Stripe.js when enabling Google Pay</title><url>https://twitter.com/jackellis/status/1576879802379751424</url></story><parent_chain></parent_chain><comment><author>mrunkel</author><text>I don’t understand the issue. If you’re already using google pay, then google is a data processor for you and you should have already received consent.&lt;p&gt;This isn’t stripe doing this, rather it’s google doing it.</text></comment>