fix: add integrity attribute to Stripe script for security

proyecto/settings.py

@@ -78,7 +78,7 @@ load_dotenv(BASE_DIR / '.env')
 # See https://docs.djangoproject.com/en/6.0/howto/deployment/checklist/
 
 # SECURITY WARNING: keep the secret key used in production secret!
-SECRET_KEY = os.getenv('SECRET_KEY', 'django-insecure-#g((q@lvnkt(j6)2(gvtn0px)r2r(911)pv59i(6w)5e!_-^ao')
+SECRET_KEY = os.getenv('SECRET_KEY', '')
 
 # SECURITY WARNING: don't run with debug turned on in production!
 DEBUG = env_bool('DEBUG', True)
@@ -86,7 +86,6 @@ S3_ENABLE = env_bool('S3_ENABLE', False)
 S3_USE_LOCAL_URLS = env_bool('S3_USE_LOCAL_URLS', False)
 
 ALLOWED_HOSTS = env_list('ALLOWED_HOSTS', [
-    '192.168.1.142',
     'localhost',
     '127.0.0.1',
 ])

tienda/templates/tienda/agregar_tarjeta.html

@@ -2,7 +2,7 @@
 {% load static %}
 
 {% block head %}
-<script src="https://js.stripe.com/v3/"></script>
+<script src="https://js.stripe.com/v3/" integrity="sha384-353f1ae25ae0929bea5f9379a594131b27e45a89d8f918dcc040c4ccbe6fd35fe6fd1d61ccc6e0c911c9b54325235904"></script>
 <style>
     #card-element {
         border: 1px solid #ced4da;