Re: [w3c/payment-request] fix: convert PaymentMethodData.data (#812)

marcoscaceres commented on this pull request.



>                    </li>
-                  <li>Add the tuple (<var>paymentMethod</var>.<a data-lt=
-                  "PaymentMethodData.supportedMethods">supportedMethods</a>,
-                  <var>serializedData</var>) to
-                  <var>serializedMethodData</var>.
+                  <li>Append <var>paymentMethod</var> to
+                  <var>paymentMethods</var>.

I believe the original design was motivated by some kind of security concern that was supposed to be mitigated by doing a JSON serialization on `.data` whose type is `object` to remove things like `Function` being added as properties.    

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/w3c/payment-request/pull/812#discussion_r250778023

Received on Thursday, 24 January 2019 21:11:50 UTC