#Security

How are you securing your Angular application?

Explain how you would expose razorpay.open() and razorpay.close() methods without polluting the merchant's global namespace.

What issues may arise if the merchant's Content Security Policy (CSP) restricts inline scripts or frame-src? How would you work around these issues?

How would you prevent a malicious parent page from spoofing a payment success event in the checkout widget you built?

Compare the use of innerHTML and createElement for handling user inputs. Discuss the implications on security for a checkout page.