News for hackers. Stuff that matters.
Re:Stripe Elements: Pre-built UI components to help you crea... by Tepix on Wednesday October 04, 2017 @02:45AM (#15398707)
So, is there a way to use this without the iframe (by going to stripe.com and then back)?

As a customer, when ordering something from a shop I prefer to send my CC details to stripe.com instead of the vendor. With an iframe i usually cannot tell that this is the case.

Re:Stripe Elements: Pre-built UI components to help you crea... by tompi on Wednesday October 04, 2017 @04:01AM (#15398942)
Actually, CC details never transit to the shop server. The CC inputs don't have a "name" attribute, so the browser doesn't add them in the request. Instead, the stripe javascript catches the submit, sends the CC details to stripe with ajax, and add an hidden input containing an authorization token the server can use.

Of course the customer don't know that, but as a developer I'm very happy not to handle any CC details in my server/app :)

Re:Stripe Elements: Pre-built UI components to help you crea... by vim_wannabe on Wednesday October 04, 2017 @02:51AM (#15398726)
This is why i love paypal.

I don't want to input my credit card info in whatever site, I'd rather do it in paypal.com.

Re:Stripe Elements: Pre-built UI components to help you crea... by Tepix on Friday October 06, 2017 @08:06AM (#15416103)
Agreed. That's why it's weird that on eBay nowadays they make it very hard to get paypal.com up in the address field of the browser. If you use the standard workflow it will be in an iframe and you will be none the wiser.