News for hackers. Stuff that matters.

A comment on Recurly.js library released for secure, customizable checkout forms. Parent comment

Re:Recurly.js library released for secure, customizable chec... by grimen on Monday August 22, 2011 @11:25PM (#2915211)
Yes in fact the iframe is the only way of doing it securely with the current web specs. ...and it can in fact be done almost completely seamless for the end user, with lil bit of hacking.
[ Parent | on HN ]
Re:Recurly.js library released for secure, customizable chec... by trungonnews on Monday August 22, 2011 @11:36PM (#2915236)
yup. it's a bitch getting the iframe to resize when the credit card form shrinks or grows.
[ Parent | on HN ]
Re:Recurly.js library released for secure, customizable chec... by simonw on Tuesday August 23, 2011 @04:00AM (#2915780)
It's not impossible though. One method of doing that is to use the trick where an iframe can communicate with its parent document by altering the #fragment URL, which can be read by both parties. It's dirty but it works. The new HTML5 postMessage API can be used as an alternative for browsers that support it.
[ Parent | on HN ]
Re:Recurly.js library released for secure, customizable chec... by alanh on Tuesday August 23, 2011 @05:17PM (#2918399)
I didn’t even realize postMessage was a new API. It works in everything newer than IE7. http://caniuse.com/#x-doc-messaging
[ Parent | on HN ]
Re:Recurly.js library released for secure, customizable chec... by grimen on Monday August 22, 2011 @11:41PM (#2915246)
haha, yes that too. I was refering to secure payments where the host site can affect he layout of payments but not the secret details. Yes you can do that if being creative. :)
[ Parent | on HN ]