iframes with allowpaymentrequest attribute are allowed to make payment requests.

third_party/WebKit/Source/web/RemoteFrameOwner.h

Index: third_party/WebKit/Source/web/RemoteFrameOwner.h
diff --git a/third_party/WebKit/Source/web/RemoteFrameOwner.h b/third_party/WebKit/Source/web/RemoteFrameOwner.h
index 084e44f7db0b1f19853cf611ab2df29d5a86870f..4d9271526665352446003e808c919148003ce6cc 100644
--- a/third_party/WebKit/Source/web/RemoteFrameOwner.h
+++ b/third_party/WebKit/Source/web/RemoteFrameOwner.h
@@ -40,6 +40,7 @@ class RemoteFrameOwner final
   int marginWidth() const override { return m_marginWidth; }
   int marginHeight() const override { return m_marginHeight; }
   bool allowFullscreen() const override { return m_allowFullscreen; }
+  bool allowPaymentRequest() const override { return m_allowPaymentRequest; }
   AtomicString csp() const override { return m_csp; }
   const WebVector<WebPermissionType>& delegatedPermissions() const override {
     return m_delegatedPermissions;
@@ -51,6 +52,9 @@ class RemoteFrameOwner final
   void setAllowFullscreen(bool allowFullscreen) {
     m_allowFullscreen = allowFullscreen;
   }
+  void setAllowPaymentRequest(bool allowPaymentRequest) {
+    m_allowPaymentRequest = allowPaymentRequest;
+  }
   void setCsp(const WebString& csp) { m_csp = csp; }
   void setDelegatedpermissions(
       const WebVector<WebPermissionType>& delegatedPermissions) {
@@ -73,6 +77,7 @@ class RemoteFrameOwner final
   int m_marginWidth;
   int m_marginHeight;
   bool m_allowFullscreen;
+  bool m_allowPaymentRequest;
   WebString m_csp;
   WebVector<WebPermissionType> m_delegatedPermissions;
 };