No IDs or names defined on form fields about recurly-js

[philharvey]

To answer your question, I didn't write the code but I can tell you that the omission of input names is intentional. It is a feature, not a bug, because it prevents the browser from sending the input values to the server when submitting the form. In this case that is very important because we don't ever want to submit sensitive card info directly to the server hosting the payment form. That task in this case is handled by Recurly.js, specifically by a secure JSONP request after clicking the submit button. This effectively offloads the responsibility of handling the sensitive data to Recurly's servers.

Handling and storing card holder data comes with a significant level of risk, which falls under the scope of what is known as PCI Compliance, something which you must be aware of when handling card data.

For more information on PCI Compliance: http://www.pcicomplianceguide.org/pcifaqs.php

I hope that helps. I see you've added names to the form inputs in your pull request. I would strongly recommend against those changes. On the contrary, your integration test should make sure those fields actually do not end up in the request to you, because that means they were improperly submitted to your server.