Comment by jjcm

3 years ago

Was it the "Daniel's Site" post? There's some weird interactions I'm finding with that iframe'd html upload and the history events.

6 comments

jjcm

Reply
jefozabuss  3 years ago

As someone who dealt with payment iframes in SPAs I'm so happy I don't have to use any iframes nowadays. There are a few articles how you can "kind of track" when the iframe caused extra history entries then you need to increase your back navigation by the count of them, it was a mess back in the days so not sure how is it solved nowadays.

  • _madmax_  3 years ago

    Today you can still use iframes but most gateways now provide a tokenization api that provides the form to produce the tokenized cc. Afaik tokenized cc isn't falling under PCI.

    My big issues with iframes is the checkout process which inevitably has to make callbacks to your api with the results of the transaction. If you're behind any sort of firewall (like most businesses are) you're in for a world of http pain.