← back to v139 · secure-payment-confirmation-ux-refresh

conformance · v139

v139 · secure-payment-confirmation-ux-refresh — conformance probe

10 assertions drawn from the spec. Each is a single contract the spec text makes. Pass/fail reflects what this browser executed; blocked means the contract was not run because it needs user mediation, hardware, or another unavailable precondition. Open the page in Chrome stable / canary / Firefox / Safari to compare.

browser: spec: https://w3c.github.io/secure-payment-confirmation/ chromestatus: #5206050462236672 generated 2026-06-05T12:00:31Z by manual-codex-devtools-mcp
0
pass
0
fail
0
blocked
10
total
id contract kind verdict detail
payment-request-still-exposed PaymentRequest is exposed; SPC authentication requests are launched through the Payment Request API. exists
payment-response-still-exposed PaymentResponse is exposed; a successful SPC show() resolves through a PaymentResponse whose details carry the PublicKeyCredential. exists
public-key-credential-still-exposed PublicKeyCredential remains exposed because SPC signs transaction data with WebAuthn-style credentials. exists
payment-request-show-method PaymentRequest.prototype.show is exposed; the browser-owned refreshed SPC UX appears when show() is invoked. typeof
payment-response-complete-method PaymentResponse.prototype.complete is exposed so merchant code can complete the payment after SPC authentication succeeds or fails. typeof
spc-valid-request-constructs Constructing PaymentRequest with secure-payment-confirmation data, HTTPS payeeOrigin, instrument.details, showOptOut, and paymentEntitiesLogos succeeds. spec ↗ script
spc-canmakepayment-resolves-boolean A valid SPC PaymentRequest exposes canMakePayment(), which resolves to a boolean used to decide whether to offer SPC or a fallback. spec ↗ script
spc-non-https-payee-origin-rejected SPC PaymentRequest validation rejects a non-HTTPS payeeOrigin before a native dialog is shown. spec ↗ script
spc-availability-static-method-shape If the experimental securePaymentConfirmationAvailability() static helper is exposed, it is a function. spec ↗ script
android-user-agent-marker-when-applicable The UX refresh ships on Android Chrome; if the visitor is on Android, the UA reflects a mobile Android context. script