Checks · PAY-002

PAY-002 · Price or amount taken from client

Why it matters

If the browser chooses the price, the buyer can choose a smaller one.

How we detect it

Payment creation reads amount or price from the request body.

How we fix it

Look the price up on the server from your catalog.

Can it be fixed automatically? Yes, with a template change

Related checks

• PAY-001 · Stripe webhook without signature verification
• PAY-003 · Paid access granted on redirect not webhook
• PAY-004 · Webhook handler not idempotent
• PAY-005 · Stripe live secret in frontend