[w3c/payment-handler] Security consideration: more awareness about cross-origin sharing (#366)

Based on:
https://docs.google.com/document/d/1i9ntZ1lEGyrzCAj1FnR9837u_rBU6vNoG0OZpiILKy0/edit

Implementation commitment:

 * [ ] Safari (link to issue)
 * [ ] Chrome (link to issue)
 * [ ] Firefox (link to issue)
 * [ ] Edge (public signal)


<!--
    This comment and the below content is programatically generated.
    You may add a comma-separated list of anchors you'd like a
    direct link to below (e.g. #idl-serializers, #idl-sequence):

    Don't remove this comment or modify anything below this line.
    If you don't want a preview generated for this pull request,
    just replace the whole of this comment's content by "no preview"
    and remove what's below.
-->
***
<a href="https://pr-preview.s3.amazonaws.com/w3c/payment-handler/pull/366.html" title="Last updated on Apr 15, 2020, 9:18 PM UTC (da90653)">Preview</a> | <a href="https://pr-preview.s3.amazonaws.com/w3c/payment-handler/366/274bcf6...da90653.html" title="Last updated on Apr 15, 2020, 9:18 PM UTC (da90653)">Diff</a>
You can view, comment on, or merge this pull request online at:

  https://github.com/w3c/payment-handler/pull/366

-- Commit Summary --

  * added security consideration about cross-origin data sharing consistent

-- File Changes --

    M index.html (28)

-- Patch Links --

https://github.com/w3c/payment-handler/pull/366.patch
https://github.com/w3c/payment-handler/pull/366.diff

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/w3c/payment-handler/pull/366