4 ms·
This is a lovely form. Ideally, Stripe would offer something like this as a way to quickly generate a nice cc entry form with the intention that site owners wou
by mrgreenfur 14y ago
This is a lovely form. Ideally, Stripe would offer something like this as a way to quickly generate a nice cc entry form with the intention that site owners would put the generated code directly on their site, or that stripe would host the service themselves. After all, you're already trusting them to run the service, might as well trust them to run the form too.
Not that it's terribly hard to build a stripe-compatible form...
- cperciva 14y agosite owners would put the generated code directly on their site That would defeat the protection which the Same Origin policy gives you (since the iframe would have the same origin as the rest of your site). or that stripe would host the service themselves Yes, that would be much better.
- mrgreenfur 14y agoI meant that they'd put it directly on their pages, no iframe needed. Agree that it'd be much better if Stripe just did it themselves.
- cperciva 14y agoI meant that they'd put it directly on their pages, no iframe needed. At the expense of loading third party javascript directly into their pages, you mean?
- mrgreenfur 14y agoYeah, I guess that misses the point of isolating the javascript, doesn't it? So, the idea is good, but has to be offered by Stripe to really minimize any exposure.