Resolved IDEAL payment methode doesn't work when purchasing an extension from within Plesk

[Kaspar]

Username:

TITLE

IDEAL payment methode doesn't work when purchasing an extension from within Plesk

PRODUCT, VERSION, OPERATING SYSTEM, ARCHITECTURE

Plesk 18.0.51
CentOS 7.9

PROBLEM DESCRIPTION

The iDEAL payment methode to purchase anything from the Extension Catalog within Plesk doesn't work as some banking websites to authorize the transaction cannot (and should not) be loaded in a iframe (because of the Content Security Policy).

Depending on which bank is selected by the user the banking website to authorize the transaction is either loaded in an iframe, opened in a popup or the user is redirected to the banks websites. The authorization websites for the major Dutch banks ABN AMRO, ING Bank and Rabobank are (tried to be) loaded in an iframe, wich fails to load.

STEPS TO REPRODUCE

1) Login to Plesk and navigate to the Extension Catalog
2) Select any extension for purchase (for example Language Pack) and click the Buy button
3) In the 'drawer ' window select iDEAL as payment methode, select the ABN AMRO from the bank drop downlist, fill out the address form and click the Buy Now button
4) On the next window click the Pay now with iDEAL link to continue the with the payment process.
5) Notice how your browser displays a message/error that the (iframe) page cannot be loaded.

ACTUAL RESULT

Purchase process fails as banking website cannot be loaded in Iframe.

EXPECTED RESULT

Selected banking website to be loaded and accessible to finish payment

ANY ADDITIONAL INFORMATION

Workaround for users would be to use the payment link in the Cleverbrige email or the use an alternative payment methode.

YOUR EXPECTATIONS FROM PLESK SERVICE TEAM

Confirm bug

 

[Peter Debik]

Hi @Kaspar, thank you for bringing this to Plesk's attention. I am not yet certain if this a technical issue in Plesk, but I have forwarded the report to the Customer Success team so that they can have a look.

 

[Peter Debik]

We checked with our payment processor Cleverbridge. Unfortunately Cleverbridge said they cannot fix the issue with iDEAL payment. It happens due to a rule on iDEAL's side that will not allow the page to load within an iframe with a different domain. To avoid further confusion, they removed iDEAL payment option from the in-place purchase drawer. It's a far from best solution, but it is the maximum that was possible.

 

[Kaspar]

[...] Unfortunately Cleverbridge said they cannot fix the issue with iDEAL payment.

Really? Thats interesting. You would think that simply making the the "Pay now with iDEAL" link open in a new window by default would solve this issue. Which would render the use of iframes superfluous for this payment method.

Anyway, thanks for reporting back.

 

[Peter Debik]

As a workaround the extensions can be purchased directly through Plesk Extensions. That website does not use iframes, so the iDEAL payment option can be used from there.