Google Pay inside sandboxed iframe for PCI DSS v4 compliance- Google Developers Blog

What this post added

This post details a method for achieving PCI DSS v4 compliance for checkout pages by integrating Google Pay within a sandboxed iframe. It explains how to configure the iframe with specific sandbox attributes (`allow-scripts`, `allow-popups`, `allow-same-origin`, `allow-forms`) and the `allow='payment'` attribute to ensure secure script execution and communication via `window.postMessage()`. It also highlights Shopify's successful implementation of this solution.