If implemented, please make sure proper cross-site scripting security issues are considered—may want to add an interface that would set specific domains that would be allowed to embed content, for example….sandbox the iframe so that sites hosting it won’t be able to interact or read the content (thinking malicous site embedding an iframe with billing portal, then stealing login credentials or payment details when users intereact with it).
Jeremy Apple
•
Jul 16, 2025
We used connectbooster prior. They had a feature where it would be in the company finance screen in connectwise. I had ours configured as a tab. When you clicked into that tab it automatically authenticated and took you into the Company in connectbooster. Would really like to see that same functionality with Alternative Payments. Pretty sure that would require Iframe to be allowed.
Log in to comment and vote
Comments3
jbbehar
Oct 13, 2025
paulzimmerman
Jun 6, 2025
If implemented, please make sure proper cross-site scripting security issues are considered—may want to add an interface that would set specific domains that would be allowed to embed content, for example….sandbox the iframe so that sites hosting it won’t be able to interact or read the content (thinking malicous site embedding an iframe with billing portal, then stealing login credentials or payment details when users intereact with it).
Jeremy Apple
Jul 16, 2025
We used connectbooster prior. They had a feature where it would be in the company finance screen in connectwise. I had ours configured as a tab. When you clicked into that tab it automatically authenticated and took you into the Company in connectbooster. Would really like to see that same functionality with Alternative Payments. Pretty sure that would require Iframe to be allowed.