php - Credit Card Payment IFrame: Unsafe JavaScript attempt to initiate navigation for frame -


i trying integrate 3rd-party payment provider's "drop-in" payment form php page. need insert script tag , form so:

    <script src="https://test.paymentprovider.com/paymentform.js?id=<?php echo $checkoutid; ?>"></script>        <form action="http://my.success.url/result.php"></form> 

on page load, generates payment form , loads additional security validation form inside iframe generates. upon success, meant redirect url had provided (in form tag above). in firefox, works perfectly, in chrome doesn't, , instead stays on initial page. when used chrome inspector view console output, got bunch of errors, 2 of were:

unsafe javascript attempt initiate navigation frame url 'http://my.success.url/form.php' frame url 'https://test.paymentprovider.com/v1/redirect.html?redirecturl=http://my.success.url/result.php&res=36d0d8b607f562a5630af&target=_top&method=get'. frame attempting navigation targeting top-level window, neither same-origin target nor processing user gesture.

and

uncaught securityerror: failed set 'href' property on 'location': current window not have permission navigate target frame 'http://my.success.url/result.php&resultpath=%2fv1%2fcheckouts%2f36d0d8b607f562a5630af%2fpayment'.

seeing happening chrome, there way "whitelist" test.paymentprovider.com chrome?


edit: apologies, phonegap app, know runs webkit.

this feature "in development" (https://www.chromestatus.com/features/5851021045661696), using developer build of chrome? might able avoid problem user version feature affect chrome versions.

there feature request thread asking way disable feature (https://code.google.com/p/google-apps-script-issues/issues/detail?id=5161). there solutions within thread might work you, avoiding using form tag.


Comments

Popular posts from this blog

java - SSE Emitter : Manage timeouts and complete() -

jquery - uncaught exception: DataTables Editor - remote hosting of code not allowed -

java - How to resolve error - package com.squareup.okhttp3 doesn't exist? -