web-platform-tests
diff --git a/‎payment-request/allowpaymentrequest/active-document.https.sub.html renamed to ‎payment-request/allowpaymentrequest/active-document-cross-origin.https.sub.html b/‎payment-request/allowpaymentrequest/active-document.https.sub.html renamed to ‎payment-request/allowpaymentrequest/active-document-cross-origin.https.sub.html
diff --git a/‎payment-request/allowpaymentrequest/active-document-same-origin.https.html
+23 b/‎payment-request/allowpaymentrequest/active-document-same-origin.https.html
+23
@@ -0,0 +1,23 @@
+<!doctype html>
+<title>PaymentRequest &lt;iframe allowpaymentrequest> in non-active document (same-origin)</title>
+<script src=/resources/testharness.js></script>
+<script src=/resources/testharnessreport.js></script>
+<script src=/common/utils.js></script>
+<iframe id="iframe" allowpaymentrequest></iframe>
+<script>
+async_test((t) => {
+  const iframe = document.getElementById('iframe');
+  const paymentArgs = [[{supportedMethods: ['foo']}], {total: {label: 'label', amount: {currency: 'USD', value: '5.00'}}}];
+
+  onload = () => {
+    const win = window[0];
+    const grabbedPaymentRequest = win.PaymentRequest;
+    win.location.href = '/common/blank.html';
+    iframe.onload = t.step_func_done(() => {
+      assert_throws({name: 'SecurityError'}, () => {
+        new grabbedPaymentRequest(...paymentArgs);
+      });
+    });
+  }
+});
+</script>