Payment with Cards console logging card number

[SpottedPaint]

Hi,

It seems like you might of left development or test code in a script.

I previously posted this but I think i did it in the wrong place so was pointed here.

We are using "Website Payments Pro Hosted Solution"  when someone enters their card details they are console.logged in the browser.

This doesn't seem correct, the culprit is a script called pmtpg.js

<script src="https://www.paypalobjects.com/webstatic/hostedsolutions/js/v1/pmtpg.js" type="text/javascript" ></script>

This is on a payment page like https://securepayments.paypal.com/webapps/HostedSoleSolutionApp/webflow/sparta/hostedSoleSolutionPro... SESSION ID}

  jQuery.validator.addMethod("creditCardNumberEmptyValidator",function(value,element)
  {
    $("#btn_pay_cc").addClass("primary");
    $("#btn_pay_cc").removeClass("disabled");
    console.log("creditCardNumberEmptyValidator value "+value);
    if(value === "") {
      return false
    }
    else {
      return true;
    }
  });

It seems like you might of left development or test code in the script.

I've included a screen shot below.

Example of credit card number output

[MTS_joaquim]

hello @SpottedPaint,

Thank you for reporting this. This behaviour has been escalated appropriately to see if it is intended or not. However this behaviour, despite being strangely logged on the console, does not compromise the security of the page as this card number already appear in full on the page itself and will not be carried over outside of this page unprotected.