What changed
No action needed unless it is required.
Affects POST /v1/customers/{customer}/cards.
Who is affected
Code that sends POST /v1/customers/{customer}/cards (card.encrypted).
Before and after
| Where | Before | After |
|---|---|---|
| POST /v1/customers/{customer}/cards · card.encrypted | absent | present |
| POST /v1/charges · card.encrypted | absent | present |
| POST /v1/customers/{customer} · card.encrypted | absent | present |
| POST /v1/customers/{customer}/sources · card.encrypted | absent | present |
| POST /v1/customers/{customer}/bank_accounts · card.encrypted | absent | present |
Based on Stripe’s published API specification. How severity is decided.