Re: [w3c/payment-handler] Return origin of payment app in PaymentHandlerResponse data? (#217) from Rouslan Solomakhin on 2018-11-06 (public-webpayments-specs@w3.org from November 2018)

From: Rouslan Solomakhin <notifications@github.com>
Date: Tue, 06 Nov 2018 20:36:36 +0000 (UTC)
To: w3c/payment-handler <payment-handler@noreply.github.com>
Cc: Subscribed <subscribed@noreply.github.com>
Message-ID: <w3c/payment-handler/issues/217/436399461@github.com>

@ianbjacobs, the data from PH API is set by the PH. We would not want a malicious PH to lie about its origin. The origin information should come from the browser, so it should be a part of the PR API, IMHO.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/w3c/payment-handler/issues/217#issuecomment-436399461

Received on Tuesday, 6 November 2018 20:36:58 UTC