Method and system for protecting a checkout transaction from malicious code injection

A computer system for detecting malicious code injection into checkout operations, the computer system comprising:

• a processor;
• and
• a communications subsystem, wherein the computer system is configured to:
• receive a Content Security Policy (CSP) report regarding a checkout operation;
• determine based on the report that the checkout operation satisfies a first criterion;
• determine that the checkout operation satisfies a second criterion;
• and
• responsive to the satisfaction of the first criterion and the second criterion, provide an indication of a detection of a potential malicious code injection into the checkout operation;
• wherein the first criterion comprises at least one of:
• a call to a Uniform Resource Locator (URL) on a list, a call string exceeding a threshold length, or a call string comprising sensitive information.

A non-transitory computer readable medium for storing instruction code for detecting malicious code injection into checkout operations, which, when executed by a processor of a computer system cause the computer system to:

• receive a Content Security Policy (CSP) report regarding a checkout operation;
• determine based on the report that the checkout operation satisfies a first criterion;
• determine that the checkout operation satisfies a second criterion;
• and
• responsive to the satisfaction of the first criterion and the second criterion, provide an indication of a detection of a potential malicious code injection into the checkout operation;
• wherein the first criterion comprises at least one of:
• a call to a Uniform Resource Locator (URL) on a list, a call string exceeding a threshold length, or a call string comprising sensitive information.