So I was making a virtual credit card from entropay.com and when I decided to Top up it up with my existing debit card. It opened up the 'Verified by Visa' page(A page in which you have to enter a password to authorize payment through your debit card. It is added as an additional security measure to check against card fraud if your card gets stolen) in an iframe. Normally when I have used the Debit Card, merchants open up the page in a new tab/window and there I enter the password and then it takes me to the payment confirmation page. Now when I enter a password in a different window/tab, other tabs can't access my keystrokes, so they can't know my password but I am not sure if this is true for an iframe. If I enter data in an iframe as the parent window is still on focus, will it be able to record my keystrokes/clipboard data?
I apologize if this wasn't the right place to ask this question. In that case, can you point me to a place where this would be more suitable.