@noiob It downloads stuff by loading another domain in a frame. Really dumb.
@onfy eh, I get why they're using two domains + servers for this, I don't get why it's still broken even though Firefox is set to allow them for this site specifically
@noiob 3rd party frames, yes. They're a bit of a security risk actually, why they're blocked by default.
@noiob It's also fucking depressing how many sites get horribly broken when they can't load 3rd party frames. Including most captchas and payment services!!!
@onfy well yeah of course they are! people don't host their own payment services! or captchas for that matter!
@onfy in the case of payment services that's actually good because it means only the payment provider is handling your info and not someone's shitty webshop that hasn't been updated in a year
@noiob Well, for payments it's weird because it's only used for this weird identity verification the bank does. It just loads the bank site in the frame and does... stuff. But there's a way to do without using a frame and oh look at that, that's the way you're supposed to do it.
@noiob This is how we're doing things in Canada: https://en.wikipedia.org/wiki/3-D_Secure
@onfy I've used Verified by Visa many times, you still have to enter your information to start that process?
@onfy I'm thinking about services like Stripe
@noiob You're uhh, "supposed to". In my experience though, not only does it rarely ask for anything all, but in the rare case where it gets pissy and does ask for something, it never works to begin with, and my transaction gets declined. This has actually gotten me banned from making card purchases on a few sites since the card getting declined like that makes them think I'm a scammer.
@onfy god it's depressing to be a web developer sometimes