I guess WebKit doesn't implement PaymentRequest or getUserMedia() yet(?), but filing this anyway...
<iframe allowpaymentrequest> controls if an iframe can access the PaymentRequest API.
<iframe allowusermedia> controls if an iframe can access the getUserMedia() API.
On the spec side:
* When a document is initialized (https://html.spec.whatwg.org/#creating-a-new-browsing-context and https://html.spec.whatwg.org/#initialise-the-document-object ), https://html.spec.whatwg.org/#set-the-allow*-flags is run, which can set "allowpaymentrequest flag" and "allowusemedia flag" on Document.
* PaymentRequest constructor calls https://html.spec.whatwg.org/#allowed-to-use : https://github.com/w3c/browser-payment-api/pull/383
* getUserMedia also call allowed to use: https://github.com/w3c/mediacapture-main/pull/427
Relevant whatwg/html PRs:
Relevant w3c/web-platform-tests PRs:
I will write more tests for same origin-domain; see https://github.com/w3c/web-platform-tests/issues/4526
Can we split this into 2 separate bugs?
Done. This one is allowpaymentrequest; allowusermedia is bug 167430.
*** Bug 226345 has been marked as a duplicate of this bug. ***
forward duping to where things have actually been happening :(
*** This bug has been marked as a duplicate of bug 229406 ***