diff --git a/specification/index.html b/specification/index.html index cf4ae41b..bd5f8b5d 100644 --- a/specification/index.html +++ b/specification/index.html @@ -11,7 +11,7 @@ var respecConfig = { edDraftURI: 'https://webmonetization.org/specification', latestVersion: 'https://webmonetization.org/specification', - publishDate: "2025-03-13", + publishDate: "2026-07-21", github: { repoURL: 'wicg/webmonetization', branch: 'main', @@ -202,7 +202,7 @@

The following example shows how to monetize various types of media - using different [=payment pointers=]. + using different [=wallet addresses=].

- The monetization keyword - indicates a [=payment pointer=] used to monetize the document. + The monetization keyword indicates a [=wallet address=] used to + monetize the document.

The monetization keyword may be @@ -605,29 +605,37 @@

[SecureContext, Exposed=Window] interface MonetizationEvent : Event { constructor(DOMString type, MonetizationEventInit eventInitDict); + readonly attribute MonetizationCurrencyAmount amountSent; + readonly attribute USVString? incomingPayment; + readonly attribute USVString walletAddress; + + // Following are deprecated readonly attribute DOMString? amount; readonly attribute DOMString? assetCode; readonly attribute octet? assetScale; readonly attribute DOMString? receipt; - readonly attribute MonetizationCurrencyAmount amountSent; readonly attribute USVString paymentPointer; - readonly attribute USVString? incomingPayment; }; dictionary MonetizationEventInit : EventInit { + required PaymentCurrencyAmount amountSent; + required USVString? incomingPayment; + required USVString walletAddress; + + // Following are deprecated required DOMString? amount; required DOMString? assetCode; required octet? assetScale; required DOMString? receipt; - required PaymentCurrencyAmount amountSent; required USVString paymentPointer; - required USVString? incomingPayment; };

- The `amount`, `assetCode`, `assetScale` and `receipt` attributes are - deprecated. + The {{MonetizationEvent/amount}}, {{MonetizationEvent/assetCode}}, + {{MonetizationEvent/assetScale}}, + {{MonetizationEvent/paymentPointer}} and + {{MonetizationEvent/receipt}} attributes are deprecated.

All [=monetization receivers=] should be migrating from generating a @@ -701,10 +709,10 @@

- paymentPointer attribute + paymentPointer attribute (deprecated)

- A [=URL=] representing the [=payment pointer=] that has been + A [=URL=] representing the [=wallet address=] that has been monetized. When getting, returns the value it was initialized with.

@@ -717,6 +725,15 @@

receiver=]. When getting, returns the value it was initialized with.

+
+

+ walletAddress attribute +

+

+ A [=URL=] representing the [=wallet address=] that has been + monetized. When getting, returns the value it was initialized with. +

+

@@ -757,8 +774,8 @@

The monetization-src directive restricts the URLs from which a - [=payment pointer=] is loaded. The syntax for the directive's name - and value is described by the following ABNF: + [=wallet address=] is loaded. The syntax for the directive's name and + value is described by the following ABNF:

           directive-name  = "monetization-src"
@@ -776,7 +793,7 @@ 

URL provided do not match monetization-src's source list:

-            <link rel="monetization" href="https://example.org/payment-pointer">
+            <link rel="monetization" href="https://example.org/wallet-address">
           
@@ -845,17 +862,17 @@

or start monetization of a particular site if they wish to do so).

- As [=payment pointers=] are generally provided as a service, a + As [=wallet addresses=] are generally provided as a service, a XSS attack could inject - malicious [=payment pointers=] into a page that uses the same service. + malicious [=wallet addresses=] into a page that uses the same service. To mitigate such an attack, it is RECOMMENDED that developers:

    -
  • host a [=payment pointer=] on their own servers and proxy +
  • host a [=wallet address=] on their own servers and proxy [[open-payments]] requests on the server as needed.
  • Set the `monetization-src` CSP directive to restrict requests to - origins they control and trust to host [=payment pointers=]. + origins they control and trust to host [=wallet addresses=].

@@ -870,10 +887,10 @@

the URL of the web page the user is currently browsing.

- Further, the user agent gets the payment information from the [=payment - pointer=] to establish the [=payment session=]. This also ensures the + Further, the user agent gets the payment information from the [=wallet + address=] to establish the [=payment session=]. This also ensures the [=monetization provider=] doesn't have access to a user's browsing - history or to the [=payment pointer=]. + history or to the [=wallet address=].

@@ -881,8 +898,8 @@

Relation to Web Payments

- Unlike the [[[Payment-Request]]] and the [[[Payment-Handler]]], which - only support "one-off" payments, Web Monetization provides a [=payment + Unlike [[[Payment-Request]]] and the [[[Payment-Handler]]], which only + supports "one-off" payments, Web Monetization provides a [=payment session=] that supports both continuous payments and "one-off" payments.