[Webkit-unassigned] [Bug 229406] Add "payment" permissions policy

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=229406

Devin Rousso <drousso at apple.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
 Attachment #437018|review?                     |review+
              Flags|                            |

--- Comment #11 from Devin Rousso <drousso at apple.com> ---
Comment on attachment 437018
  --> https://bugs.webkit.org/attachment.cgi?id=437018
Patch

View in context: https://bugs.webkit.org/attachment.cgi?id=437018&action=review

r=me

> Source/WebCore/Modules/applepay/PaymentSession.cpp:54
> +        return Exception { SecurityError, "Payment Request API is disabled Permissions Policy."_s };

Can we make this error into an actual sentence?  Maybe `"Third-party iframes are not allowed to request payments unless explicitly allowed via Feature-Policy (payment)"`?

> Source/WebCore/Modules/paymentrequest/PaymentRequest.cpp:34
> +#include "FeaturePolicy.h"

NIT: I don't think this is needed anymore

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20210901/eed91a9b/attachment-0001.htm>