[w3c/payment-handler] Cross-origin iframes and feature policy. (#282)

Prohibit cross-origin iframes from installing payment handlers, unless
allowed by the feature policy.

closes #281

The following tasks have been completed:

 * [ ] web platform tests
 * [ ] MDN Docs added

Implementation commitment:

 * [ ] Safari
 * [x] [Chrome](https://crbug.com/828948)
 * [ ] Firefox
 * [ ] Edge
You can view, comment on, or merge this pull request online at:

  https://github.com/w3c/payment-handler/pull/282

-- Commit Summary --

  * Cross-origin iframes and feature policy.

-- File Changes --

    M index.html (42)

-- Patch Links --

https://github.com/w3c/payment-handler/pull/282.patch
https://github.com/w3c/payment-handler/pull/282.diff

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/w3c/payment-handler/pull/282