Add *.square.online and *.weebly.com for Block, Inc.

[bcanilao-sq]

Checklist of required steps

• Description of Organization
• Robust Reason for PSL Inclusion
• DNS verification via dig (will be added after PR number is assigned)
• Each domain listed in the PRIVATE section has and shall maintain at least two years remaining on registration, and we shall keep the _psl TXT record in place in the respective zone(s).

Submitter affirms the following:

• We are listing any third-party limits that we seek to work around in our rationale
• This request was not submitted with the objective of working around other third-party limits.
• The submitter acknowledges that it is their responsibility to maintain the domains within their section.
• The Guidelines were carefully read and understood, and this request conforms to them.
• The submission follows the guidelines on formatting and sorting.
• A role-based email address has been used and this inbox is actively monitored with a response time of no more than 30 days.

Abuse Contact:

• Abuse contact information (email or web form) is available and easily accessible. URL where abuse contact or abuse reporting form can be found: https://squareup.com/help/us/en/contact
• Yes, I understand. I could break my organization's website cookies and cause other issues, and the rollback timing is acceptable. Proceed anyways.

Description of Organization

Block, Inc. (formerly Square, Inc.) is a global technology company focused on financial services and digital payments. We provide tools and services that enable businesses of all sizes to accept payments, manage their operations, and grow their business. The submitter is an infrastructure engineer at Block, responsible for maintaining our domain infrastructure. Our platform provides hosted e-commerce solutions through our weebly.com and square.online services, which allow merchants to create and manage their online stores.

Organization Website: https://block.xyz

Reason for PSL Inclusion

We are requesting the inclusion of weebly.com and square.online in the PSL to ensure proper security isolation between our merchants' websites. Square provides each seller with their own subdomain (e.g., seller1.weebly.com, seller2.square.online) where they can host their online store. By including these entries in the PSL, we ensure:

1. Cookie isolation between different merchants' domains, preventing potential cross-site security issues
2. Proper SSL certificate issuance and validation for each merchant subdomain
3. Clear domain boundaries for security features like Content Security Policy (CSP)

These wildcard entries are crucial for our multi-tenant architecture where each merchant needs their own isolated domain space, similar to how other platforms like GitHub Pages (.github.io) and Netlify (.netlify.app) operate. Our existing square.site entry (PR #2385) was added for the same reason.

The domains are managed by our core infrastructure team and will be maintained indefinitely as they are critical parts of our e-commerce platform. We confirm that the domain registrations will be maintained for more than 2 years and we will maintain the _psl TXT records as required.

Number of users this request is being made to serve: >14 million active merchants (current)

DNS Verification

Once a PR number is assigned, we will add the following TXT records:

_psl.weebly.com    TXT "https://github.com/publicsuffix/list/pull/2969"
_psl.square.online TXT "https://github.com/publicsuffix/list/pull/2969"

[pencilnav]

Pull Requests MUST use the automated template when adding. Do not cut and paste it into a GPT to generate a response or delete / alter the form. Pull requests that do not use the template, that alter it or summarize it will be closed by volunteers without action. Why? There are specific checkboxes that are part of the volunteers' review or are important attestations for public record and transparency and consistency of processing.

Please fill your PR message using our latest provided PR Template WITHOUT using any forms of AI assist.