[w3c/payment-request] Extract actionable items from @lknik's review (#641)

There are a few actionable items from @lknik's review that we should fix: 
https://blog.lukaszolejnik.com/privacy-of-web-request-api/

We should review the article and extract actionable things that we can fix (specially around iframes, which @lknik shows are pretty easy to bypass).

I believe this is related: 
https://github.com/w3c/payment-request/issues/629 

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/w3c/payment-request/issues/641