v5.41.0+ Drop-in broken in latest Safari when loading inside an iFrame

[ollym]

When loading a Drop-in within an iFrame. We get the following error in the console:

[Error] InvalidAccessError: Trying to start an Apple Pay session from a document with an different security origin than its top-level frame.

My expectation is that Apple Pay is just skipped if initialisation fails.

If we add the following to the /session endpoint it fixes the issue:

blockedPaymentMethods: ['applepay']

But means we don't have ApplePay which is not ideal.

[ollym]

Just tried v5.42.1 and the same error.

Please fix this, we don't want to have apple pay disabled universally for long.

[ollym]

PS this appears fixed in the latest webkit:
https://stackoverflow.com/questions/63739348/trying-to-start-an-apple-pay-session-from-a-document-with-an-different-security

WebKit/WebKit#11485

[ollym]

I just downloaded the latest Safari Technology Preview and can confirm it works:

You just need to add allow="payment" to your parent iframe.

But for now Adyen - you should fix this and gracefully fallback to not offering ApplePay if the initialisation failed.

[EduardoMateos]

adyen please fix this. :)

[ollym]

@Adyen can someone please acknowledge this issue and its being looked at?

[ribeiroguilherme]

Hi @ollym ,

We acknowledged the issue and we are planning to take a look into it in the next weeks. There are other high priority tasks at this moment which the team is busy with, so that is why we couldn't investigate this further. Apologies for the delay

In the meantime: Can you share which version of Safari is this happening?

[ollym]

Every version, including iOS

[ribeiroguilherme]

And what is your current Safari version that you are testing?

[ollym]

Version 16.4 (18615.1.26.110.1)

[ribeiroguilherme]

@ollym we released 5.45.0 which contains the fix for this issue. Thanks for reaching out to us. cheers!