Justify a script

Records why this script is allowed to run on a payment page, which is what PCI DSS 6.4.3 requires. The justification is tied to the script's current hash, so if its contents change later it goes back to needing review. Adds an entry to the script's history.

Requires the analyst role on the website and the compliance plan feature.

Authorization

AuthorizationBearer <token>

An OpenID Connect access token issued by Keycloak, acting as the signed-in user.

In: header

Path Parameters

workspaceId*string

websiteId*string

inventoryId*string

Request Body

application/json

TypeScript Definitions

Use the request body type in TypeScript.

justification*string

Why this script is allowed to run on a payment page. Assessors read this, so say what the script does and who authorized it.

Length1 <= length <= 4096

Response Body

`application/json`

curl -X POST "https://api-next.centralcsp.com/v1/workspaces/string/websites/string/compliance/scripts/string/justify" \  -H "Content-Type: application/json" \  -d '{    "justification": "Stripe payment form, required for card entry. Approved by security review 2026-01-12."  }'

{  "id": "string",  "websiteId": "string",  "subresourceUrl": "https://js.stripe.com/v3/",  "status": "unreviewed",  "justification": "string",  "originId": "string",  "origin": "https://js.stripe.com",  "tags": [    {      "id": "string",      "name": "string",      "color": "slate"    }  ],  "justifiedHash": "string",  "currentHash": "string",  "ruleId": "string",  "justifiedBy": "string",  "justifiedByUser": {    "id": "string",    "email": "string",    "firstName": "string",    "lastName": "string",    "picture": "string"  },  "justifiedAt": "2019-08-24T14:15:22Z",  "unauthorizedReason": "string",  "unauthorizedBy": "string",  "unauthorizedByUser": {    "id": "string",    "email": "string",    "firstName": "string",    "lastName": "string",    "picture": "string"  },  "unauthorizedAt": "2019-08-24T14:15:22Z",  "retiredAt": "2019-08-24T14:15:22Z",  "firstSeen": "2019-08-24T14:15:22Z",  "lastSeen": "2019-08-24T14:15:22Z",  "createdAt": "2019-08-24T14:15:22Z",  "updatedAt": "2019-08-24T14:15:22Z"}