4 ms·
I think there are a couple of legitimate uses of iframes, but in most cases, it’s not something you want to use. If you want to take payments in your applicati
by ezreth 3y ago
I think there are a couple of legitimate uses of iframes, but in most cases, it’s not something you want to use.
If you want to take payments in your application using a vendor like Nodus, ie, if you have an app that is being used by a CSR/Salesperson, and they need to take CC or eCheck data, showing the payment application in an iframe (within the context of the app) lets you have that feature within the application but importantly, means you don’t have to be PCI DSS compliant yourself
- tstenner 3y agoOpening the payment flow in a separate window while displaying a message like "please complete the payment with your chosen payment provider" is almost as good from a usability standpoint and a lot better when considering security best practices.