← Back to release summary

Remove Secure Payment Confirmation user activation requirement

Category

Miscellaneous

Type

No developer-visible change

Status

Enabled by default (Chrome 118)

Intent stage

None

Summary

To help developers reduce friction in Secure Payment Confirmation flows, we are removing the user activation requirement. Spam and clickjacking mitigations are put in place to mitigate security and privacy risks with this change.

Standards & signals

• Specification: https://github.com/w3c/secure-payment-confirmation/pull/236
• Firefox: No signal
• Safari: No signal
• Web developers: Positive — We've received direct feedback from web developers that they would be able to reduce friction in their redirect-based payment flows if SPC could be initiated without a user activation.
• Tracking bug: https://bugs.chromium.org/p/chromium/issues/detail?id=1420304

Docs: https://docs.google.com/document/d/1DW4hGyuVzcN8sE8TC3YOkg6xO4XpUGZQNxcHgfMXVwA

Samples: https://rsolomakhin.github.io/pr/spc-activationless

View on chromestatus.com