OptionalcspExplicit; selects the Worldline host the Tokenizer script loads from.
OptionalgetOptionalloadTest seams.
OptionalpaymentAccount capabilities vary per contract — override the conservative default.
OptionalsdkAnother Worldline-served Tokenizer script URL. Worldline requires the script to load from its own servers, so this never points at a self-hosted copy.
A Content-Security-Policy nonce for the Tokenizer
<script>the adapter injects, set as itsnonceattribute before the tag is inserted, so ascript-srcthat allows scripts by nonce without'strict-dynamic'runs it. The Tokenizer reads no nonce, loads no further script and adds no<style>, so that tag is all the nonce needs to cover; the one inlinestyleattribute it sets is cosmetic, and no nonce applies to attributes. Pass the value alone, as in the policy's'nonce-<value>'source; the constructor refuses anything else. The adapter never reads a nonce from the page, and aloadScriptseam loads the script without it.