Re: [paymentrequest] Should the Payment Request API only be available in a top-level browsing context? (#30)

It'll go very badly very quickly if third party content can interact with third party payment tools.  lol  

In fact, even the top-level context should not be able to learn what payment instruments the user supports before the user selects the appropriate one, which requires a secure context that cannot contact the merchant, but maybe that discussion belongs in anther issue.

---
Reply to this email directly or view it on GitHub:
https://github.com/WICG/paymentrequest/issues/30#issuecomment-163905421