From 3722bf9b2df7619d837aee122e60ee769eb6b437 Mon Sep 17 00:00:00 2001
From: Abdurrahman Saber <a.saber@odex.sa>
Date: Wed, 3 Sep 2025 15:34:18 +0300
Subject: [PATCH] [FIX] applepay_fast_checkout, payment_hyperpay: use local
 jquery to prevent CSP violation

---
 .../applepay_fast_checkout/views/applepay_iframe.xml            | 2 +-
 .../payment_hyperpay/static/src/js/payment_hyperpay.js          | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/odex25_donation/applepay_fast_checkout/views/applepay_iframe.xml b/odex25_donation/applepay_fast_checkout/views/applepay_iframe.xml
index 7f83bb306..a9f5d0852 100644
--- a/odex25_donation/applepay_fast_checkout/views/applepay_iframe.xml
+++ b/odex25_donation/applepay_fast_checkout/views/applepay_iframe.xml
@@ -13,7 +13,7 @@
                     img-src 'self' https://*.oppwa.com;" />
 
                 <script t-att-src="hyperpay_src" t-att-integrity="integrity" crossorigin="anonymous" />
-                <script src="https://ajax.googleapis.com/ajax/libs/jquery/3.4.1/jquery.min.js" />
+                <script src="/web/static/lib/jquery/jquery.js" />
                 <script>
                     merchant_id = "<t t-esc="merchant_id" />";
                 </script>
diff --git a/odex25_donation/payment_hyperpay/static/src/js/payment_hyperpay.js b/odex25_donation/payment_hyperpay/static/src/js/payment_hyperpay.js
index 3cd480a1c..62b3ccf9b 100644
--- a/odex25_donation/payment_hyperpay/static/src/js/payment_hyperpay.js
+++ b/odex25_donation/payment_hyperpay/static/src/js/payment_hyperpay.js
@@ -117,7 +117,7 @@ odoo.define("payment_hyperpay.payment_hyperpay", function (require) {
                 $modal_html.appendTo($("body")).modal({ keyboard: false, backdrop: "static" });
                 var style_css = '<link rel="stylesheet" href="' + base_url + '/payment_hyperpay/static/src/css/hyperpay_style.css" />';
                 var script = `<script async src="${domain}/v1/paymentWidgets.js?checkoutId=${checkoutId}" integrity="${result.integrity}" crossorigin="anonymous"></script>`
-                var js_script = '<script src="https://ajax.googleapis.com/ajax/libs/jquery/3.4.1/jquery.min.js"></script>'
+                var js_script = '<script src="/web/static/lib/jquery/jquery.js"></script>'
                 var shopperResultUrlTag =
                     '<form action="' +
                     base_url +