PAYCOMBAT / LOCAL TEST TOOL

Test checkout in an iframe

Merchant iframe integration guide

This test page embeds checkout URLs from any HTTPS host. It does not create new transactions.

No checkout has been loaded yet.

The URL is used only in page memory; it is not saved to storage, logs, or the repository. No sandbox attribute is set, so the initial test does not introduce additional iframe restrictions.
Viewport size

Presets change iframe dimensions. Wider presets scroll horizontally on smaller screens. Flexible mode follows the available page width.

How to test mobile and tablet browsers

Use your browser's device emulation to check the entire merchant page at mobile and tablet sizes, including portrait and landscape. This is still an emulation.

For real device testing, serve this tool on an approved HTTPS test origin accessible from your phone or tablet, then open it in the device browser and select Flexible. Localhost on your device refers to that device, not your computer. The checkout must allow the test origin to embed it.

Test touch, scrolling, the on-screen keyboard, orientation changes, bank redirects, popups, and e-wallet app switching on the actual supported devices. The parent page cannot make a cross-origin checkout responsive; its own layout must support smaller viewports.

How to assess the results
  1. Open DevTools → Console and Network before loading the iframe.
  2. If the checkout UI and transaction details appear, the page can be loaded in an iframe on this test origin.
  3. If “refused to frame” appears, check X-Frame-Options or CSP frame-ancestors. If it fails before the iframe request, check CSP frame-src on the merchant website.
  4. If an error or expiration message also appears when opened directly, this does not establish an iframe issue. Use a valid transaction for the selected environment.
  5. Test each provider flow separately. Successfully displaying the initial page does not guarantee that bank redirects or e-wallet apps will work.

The parent cannot read cross-domain iframe content. The load event does not determine whether the test passes or fails. Do not make a payment if you are only checking whether the page can be displayed.