Re: [w3c/browser-payment-api] Send HTMLIFrameElement.allowPaymentRequest to HTML spec (#311)

This code would live on `evil.com`, so we would show the title, icon, and origin of `evil.com`. Perhaps my language was confusing, because "top-level frame" does not mean the top-most `<iframe>` element on the page. The term "top-level frame" refers to the HTML page that is not inside of any `<iframe>` element.

For example, suppose you load `https://rsolomakhin.github.io/pr/iframe/` into your website by typing that URL into the address bar. The user agent will show the icon, title, and full URL (usually) of `https://rsolomakhin.github.io/pr/iframe/`. Here, `https://rsolomakhin.github.io/pr/iframe/` is the "top-level frame", even though it's not inside of any `<iframe>` element.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/w3c/browser-payment-api/issues/311#issuecomment-261248113