Native Form response details now include only payment state, amount and currency; payer email, refund details and dispute details remain on the website. Response fields, Store order line items and native text payloads are bounded. Store tracking URLs and Links social URLs are revalidated before they cross the bearer API, including rejection of credential-bearing URLs.
Tighten native projection safety
Native read-only projections now withhold unnecessary payment details and reject unsafe stored links.