[magundu]

Now more people know how to do the card testing.

There must be an option to allow stripe script only in specific domains and sub domains. All other domains should be blocked.

[tehbeard]

Doesn't work as that kind of info is in the http headers sent by the client..