Re: [w3c/webpayments-payment-apps-api] Payment apps and methods, are they the same? (#35)

> Only if the script has a response header Service-Worker-Allowed containing the maximum allowed scope

Perhaps I am misunderstanding but that means the sw at `http://example.com/~bob/sw.js` can declare it's scope to be `http://example.com/~alice/` and the thing that allows this is the service that serves the `http://example.com/~bob/sw.js` script.

i.e. Bob gives Bob permission to set his scope to be Alice

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/w3c/webpayments-payment-apps-api/issues/35#issuecomment-247037100