The "customAmount" field minimum should be validated server side

[tomfischerNL]

Description

When I create a payment form with a minimum "one time custom payment amount", and I insert an minimum price, it is possible to remove the min attr in the browser with the console. This needs to be validated server side, not the customAmount, but the minimum amount.

Steps to reproduce

1. If I set a minimum of 100 USD (see attachment)
   

2. I can remove the min attr in the browser, and put in 1 dollar as amount, and submit the form
   

Additional info

• Craft version: 4.3.5
• PHP version: 8.1.11
• Database driver & version: MySQL 10.6.10
• Plugin version: 5.0.8
• Is SCA and Stripe Checkout enabled?:

[andrelopez]

Hi @tomfischerNL We just released Stripe Payments v5.0.9 with a fix for this issue. Thanks for reporting

[tomfischerNL]

Hi @andrelopez, thanks for fixing this bug so quickly!