When Webpay gets a success (bug 936125) or failure (bug 936126) redirect, use Zippy's notice service to verify the token. http://zippypayments.readthedocs.org/en/latest/security.html#token-checking
webpay PR: https://github.com/mozilla/webpay/pull/374 zippy PR: https://github.com/mozilla/zippy/pull/63
Zippy patch: https://github.com/mozilla/zippy/commit/9e223970584a44f4c1e9001aa0d1019a20110484 Webpay: https://github.com/mozilla/webpay/commit/483ecf75c8343afc34378346efa5cfa98863b65a
Target Milestone: --- → 2014-01-21
Status: NEW → RESOLVED
Last Resolved: 4 years ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.