history</a>. Key set of changes are viewable in the <a href=

"#changelog">Changelog</a>.

<li>Deprecated `allowpaymentrequest` attribute.

</li>

<section>

<h2>

Using with cross-origin iframes

</h2>

<p>

To indicate that a cross-origin [^iframe^] is allowed to invoke the

payment request API, the [^iframe/allow^] attribute along with the

"payment" keyword can be specified on the [^iframe^] element.

</p>

<pre class="example html" title=

"Using Payment Request API with cross-origin iframes">

&lt;iframe

src="https://cross-origing.example"

allow="payment"&gt;

&lt;/iframe&gt;

</pre>

<p>

If the [^iframe^] will be navigated across multiple origins that

support the Payment Request API, then one can set [^iframe/allow^] to

`"payment *"`. The [[[permissions-policy]]] specification provides

further details and examples.

</p>

</section>

<aside class="note">

</aside>

iframes through [[HTML]]'s [^iframe/allow^] attribute.