Closed marcoscaceres closed 6 years ago
@ianbjacobs, thanks. Fixed.
Noting that this is also addressed in https://github.com/w3c/payment-request/pull/655
... should get that merged... but it means we are going to break 90% of the tests, so it's work and so lazy 😴
I'd prefer we move forward and rewrite the Priv/Security section properly once we land #655, and we can reflect more fully on what we've learned from the CR process. Additionally, we need to document the mitigations put in place as a result of #641.
Will pick this up again in https://github.com/w3c/payment-request/issues/675
Preview | Diff