topup_creem.go
17.1 KB
-
fix: add PaymentProvider field to prevent cross-gateway callback attacks · a7c38ec8EPay allows users to switch payment methods (e.g. wxpay→alipay) during checkout, causing callback rejection. Replace fragile blocklist guard with a PaymentProvider field on TopUp and SubscriptionOrder that identifies which gateway created the order.
CaIon committed