{"action":"opened","issue":{"url":"https://api.github.com/repos/braintree/braintree_java/issues/35","labels_url":"https://api.github.com/repos/braintree/braintree_java/issues/35/labels{/name}","comments_url":"https://api.github.com/repos/braintree/braintree_java/issues/35/comments","events_url":"https://api.github.com/repos/braintree/braintree_java/issues/35/events","html_url":"https://github.com/braintree/braintree_java/issues/35","id":129856687,"number":35,"title":"Braintree JS SDK in sandbox iframe","user":{"login":"jart","id":49262,"avatar_url":"https://avatars.githubusercontent.com/u/49262?v=3","gravatar_id":"","url":"https://api.github.com/users/jart","html_url":"https://github.com/jart","followers_url":"https://api.github.com/users/jart/followers","following_url":"https://api.github.com/users/jart/following{/other_user}","gists_url":"https://api.github.com/users/jart/gists{/gist_id}","starred_url":"https://api.github.com/users/jart/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jart/subscriptions","organizations_url":"https://api.github.com/users/jart/orgs","repos_url":"https://api.github.com/users/jart/repos","events_url":"https://api.github.com/users/jart/events{/privacy}","received_events_url":"https://api.github.com/users/jart/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":0,"created_at":"2016-01-29T19:17:46Z","updated_at":"2016-01-29T19:17:46Z","closed_at":null,"body":"Forgive me if this is not the proper place to file this bug.\r\n\r\nIf I try to embed the 'dropin' Braintree JS SDK v2 in an iframe with the HTML5 `sandbox` attribute (for bidirectional security), then the browser will raise an error saying that the script is accessing `document.cookie` to write a value named 'venmo' or something. Even though I'm not using Venmo.\r\n\r\nA workaround exists, which is to host the iframe on a separate domain, so cross-origin browser security policies kick in. But it would simplify production systems management if the braintree iframe were able to be hosted inside a sandbox."}}