{"action":"closed","issue":{"url":"https://api.github.com/repos/w3c/browser-payment-api/issues/363","repository_url":"https://api.github.com/repos/w3c/browser-payment-api","labels_url":"https://api.github.com/repos/w3c/browser-payment-api/issues/363/labels{/name}","comments_url":"https://api.github.com/repos/w3c/browser-payment-api/issues/363/comments","events_url":"https://api.github.com/repos/w3c/browser-payment-api/issues/363/events","html_url":"https://github.com/w3c/browser-payment-api/issues/363","id":193937343,"number":363,"title":"\"allowed to use\" check is incorrect","user":{"login":"bzbarsky","id":1457979,"avatar_url":"https://avatars.githubusercontent.com/u/1457979?v=3","gravatar_id":"","url":"https://api.github.com/users/bzbarsky","html_url":"https://github.com/bzbarsky","followers_url":"https://api.github.com/users/bzbarsky/followers","following_url":"https://api.github.com/users/bzbarsky/following{/other_user}","gists_url":"https://api.github.com/users/bzbarsky/gists{/gist_id}","starred_url":"https://api.github.com/users/bzbarsky/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/bzbarsky/subscriptions","organizations_url":"https://api.github.com/users/bzbarsky/orgs","repos_url":"https://api.github.com/users/bzbarsky/repos","events_url":"https://api.github.com/users/bzbarsky/events{/privacy}","received_events_url":"https://api.github.com/users/bzbarsky/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":2,"created_at":"2016-12-07T01:55:01Z","updated_at":"2016-12-08T23:09:43Z","closed_at":"2016-12-08T23:09:43Z","body":"PaymentRequest constructor, step 3.3, says:\r\n\r\n> If any ancestor browsing context of context has an active document with an origin that is not the same as origin and context's browsing context container's node document is not allowed to use the feature indicated by attribute name allowpaymentrequest, then throw a SecurityError. \r\n\r\nSo this will check whether the _parent_ document is allowed to use the feature.  Shouldn't we be checking whether _this_ document is allowed to use the feature?"}}
{"actor":{"display_login":"adrianba"}}