iframes with allowpaymentrequest attribute are allowed to make payment requests.

third_party/WebKit/Source/web/WebLocalFrameImpl.cpp

Index: third_party/WebKit/Source/web/WebLocalFrameImpl.cpp
diff --git a/third_party/WebKit/Source/web/WebLocalFrameImpl.cpp b/third_party/WebKit/Source/web/WebLocalFrameImpl.cpp
index 6e464c6aecf66892e4f2d2f857ff24075f0c9f93..a675e1d9dce0faadf5f55ccbef91befe73d88bca 100644
--- a/third_party/WebKit/Source/web/WebLocalFrameImpl.cpp
+++ b/third_party/WebKit/Source/web/WebLocalFrameImpl.cpp
@@ -1626,7 +1626,8 @@ LocalFrame* WebLocalFrameImpl::createChildFrame(
   WebFrameOwnerProperties ownerProperties(
       ownerElement->scrollingMode(), ownerElement->marginWidth(),
       ownerElement->marginHeight(), ownerElement->allowFullscreen(),
-      ownerElement->csp(), ownerElement->delegatedPermissions());
+      ownerElement->allowFullscreen(), ownerElement->csp(),

[please use gerrit instead, 2016/10/17 13:57:48]

You seem to have passed in "allowFullscreen()" twice. One of these should be
"allowPaymentRequest()". Right?

[pals, 2016/10/18 04:39:21]

Its a mistake. Messed up during rebase from patch set 2 to patch set 3.
Corrected now.

+      ownerElement->delegatedPermissions());
   // FIXME: Using subResourceAttributeName as fallback is not a perfect
   // solution. subResourceAttributeName returns just one attribute name. The
   // element might not have the attribute, and there might be other attributes