Calling PaymentRequest.show without user activation

Category: Miscellaneous
Type: Feature removal
Status: Removed (Chrome 102)
Intent stage: Removed

Summary

Allowing PaymentRequest.show() to be triggered without a user activation could be abused by malicious websites. To protect users, the spec was changed to require user activation, and we are now following through in the Chrome implementation.

Standards & signals

Specification: https://www.w3.org/TR/payment-request/#show-method
Firefox: In development
Safari: Shipped/Shipping
Web developers: No signals
Tracking bug: https://crbug.com/825270

View on chromestatus.com