Do not parse JSON in the browser.

components/payments/payment_request.mojom

 // Copyright 2016 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 [JavaPackage="org.chromium.payments.mojom"]
 module payments.mojom;
 
 // The shipping address that the browser process provides to the renderer
 // process. Built either by the browser or a payment app.
 struct PaymentAddress {
@@ skipping 109 matching lines @@
 };
 
 struct PaymentOptions {
   bool request_payer_name;
   bool request_payer_email;
   bool request_payer_phone;
   bool request_shipping;
   PaymentShippingType shipping_type;
 };
 
+enum AndroidPayEnvironment {
+  PRODUCTION,
+  TEST
+};
+
+enum AndroidPayCardNetwork {
+  AMEX,
+  DISCOVER,
+  MASTERCARD,
+  VISA
+};
+
+enum AndroidPayTokenization {
+  UNSPECIFIED,
+  GATEWAY_TOKEN,
+  NETWORK_TOKEN
+};
+
+struct AndroidPayTokenizationParameter {
+  string? key;
+  string? value;
+};
+
 struct PaymentMethodData {
   array<string> supported_methods;
+
   // A JSON string built by the renderer from a JavaScript object that the
   // merchant website provides. The renderer uses
-  // blink::JSONObject::toJSONString() to generate this string. The browser
-  // parses the string via JSONObject(JsonSanitizer.sanitize(stringified_data))
-  // and passes a part of the JSON object to the payment app, for example
-  // Android Pay. There's no one format for this object, so richer types cannot
-  // be used. A simple example:
+  // blink::JSONObject::toJSONString() to generate this string. The browser does
+  // not parse the string and passes it as-is directly to payment apps. There's
+  // no one format for this object, so richer types cannot be used. A simple
+  // example:
   //
   // {"gateway": "stripe"}
   string stringified_data;
+
+  // Android Pay specific method data is parsed in the renderer.
+  // https://developers.google.com/web/fundamentals/getting-started/primers/payment-request/android-pay
+  // TODO(rouslan): Stop parsing Android Pay data. http://crbug.com/620173
+  AndroidPayEnvironment environment;
+  string? merchant_name;
+  string? merchant_id;
+  array<AndroidPayCardNetwork> allowed_card_networks;
+  AndroidPayTokenization tokenization_type;
+  array<AndroidPayTokenizationParameter> parameters;
 };
 
 enum PaymentComplete {
   SUCCESS,
   FAIL,
   UNKNOWN
 };
 
 interface PaymentRequest {
   Init(PaymentRequestClient client,
        array<PaymentMethodData> methodData,
        PaymentDetails details,
        PaymentOptions options);
   Show();
   UpdateWith(PaymentDetails details);
   Abort();
   Complete(PaymentComplete result);
 };