<!doctype html>
<html lang="en">

<head>
    <meta charset="utf-8">
    <meta name="viewport" content="width=device-width, initial-scale=1">
    <title>Merchant Website</title>
    <link rel="icon" href="/favicon.ico">
    <link rel="stylesheet" type="text/css" href="../../style.css">
    <link rel="manifest" href="manifest.json">
</head>

<body>
    <div id="contents">
        <h1>Merchant Website</h1>

        <p>This is a merchant website that includes an iframe from a payment
        service website. The payment handler name and icon should come from the
        web app manifest of the payment handler in the iframe instead of the top
        level context of the merchant.</p>

        <div id="src">
            <p>View the source code:</p>
            <ul>
                <li><a href="manifest.json">Web app manifest</a></li>
            </ul>
        </div>

        <p>The following iframe is <font color="green">allowed</font> to install the payment handler.</p>

        <iframe src="payment-app/index.html" width="800px" height="600px" allow="payment"></iframe>

        <p>The following iframe is <font color="red">not allowed</font> to install the payment handler.</p>

        <iframe src="payment-app/index.html" width="800px" height="600px"></iframe>
    </div>

    <script src="/redirect.js"></script>
</body>

</html>

<!doctype html>
<html lang="en">

<head>
    <meta charset="utf-8">
    <meta name="viewport" content="width=device-width, initial-scale=1">
    <title>Merchant Website</title>
    <link rel="icon" href="/favicon.ico">
    <link rel="stylesheet" type="text/css" href="../../style.css">
    <link rel="manifest" href="manifest.json">
</head>

<body>
    <div id="contents">
        <h1>Merchant Website</h1>

        <p>This is a merchant website that includes an iframe from a payment
        service website. The payment handler name and icon should come from the
        web app manifest of the payment handler in the iframe instead of the top
        level context of the merchant.</p>

        <div id="src">
            <p>View the source code:</p>
            <ul>
                <li><a href="manifest.json">Web app manifest</a></li>
            </ul>
        </div>

        <p>The following iframe is <font color="green">allowed</font> to install the payment handler.</p>

        <iframe src="payment-app/index.html" width="800px" height="600px" allow="payment"></iframe>

        <p>The following iframe is <font color="red">not allowed</font> to install the payment handler.</p>

        <iframe src="payment-app/index.html" width="800px" height="600px" allow="payment 'none'"></iframe>
    </div>

    <script src="/redirect.js"></script>
</body>

</html>

Disable payment in second iframe
Disable payment in second iframe
