Re: [w3c/payment-request] Disable Payment Request API in CSP/iframe sandbox (#698) from ianbjacobs on 2018-05-07 (public-webpayments-specs@w3.org from May 2018)

From: ianbjacobs <notifications@github.com>
Date: Mon, 07 May 2018 15:14:00 +0000 (UTC)
To: w3c/payment-request <payment-request@noreply.github.com>
Cc: Subscribed <subscribed@noreply.github.com>
Message-ID: <w3c/payment-request/issues/698/387098104@github.com>

I am not familiar with Feature Policy. However, the comment from @clelland that for security reasons powerful features should be disabled by default makes sense to me. 

@devd, right now I don't see in the normative dependencies of Payment Request any dependency on feature-policy. 

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/w3c/payment-request/issues/698#issuecomment-387098104

Received on Monday, 7 May 2018 15:14:25 UTC