Zum Hauptinhalt springen
tsecurity.de LIVE
Echtzeit-Radar & Feeds
Alle RSS Feeds
👥 Community & Social
Sichere ProgrammierungMy fact-checker said CONFIRMED about a group that doesn't exist(23.09.2026 um 02:13 Uhr)
Sichere ProgrammierungZero-Friction Payment Architectures for Global Scalability(23.09.2026 um 02:20 Uhr)
Sichere ProgrammierungYour SaaS launch should have a high-score table(23.09.2026 um 02:24 Uhr)
Sichere ProgrammierungMy fact-checker said CONFIRMED about a group that doesn't exist(23.09.2026 um 02:13 Uhr)
Sichere ProgrammierungZero-Friction Payment Architectures for Global Scalability(23.09.2026 um 02:20 Uhr)
Sichere ProgrammierungYour SaaS launch should have a high-score table(23.09.2026 um 02:24 Uhr)
Intelligence View
⚡ tsecurity.de Intelligence

Building an embeddable calculator widget from a REST API: how ReceiptEdit ships sales tax as an iframe

Continuing the open sales-tax dataset thread — the useful trick I did not think would matter as much as it did: shipping the data as an embeddable iframe widget, not just a REST API. The API alone is at receiptedit.com/api/sales-tax — cle…

0
↗ Quelle (dev.to)
Reagiere als Erste:r — dein Feedback zählt!

Continuing the open sales-tax dataset thread — the useful trick I did not think would matter as much as it did: shipping the data as an embeddable iframe widget, not just a REST API.



The API alone is at receiptedit.com/api/sales-tax — clean JSON, no auth, CORS. But an API needs a developer to consume it. A widget just needs someone to paste an iframe:




<iframe
src="https://receiptedit.com/api/embed/sales-tax/california"
width="380" height="540"
style="border:0;max-width:100%"
loading="lazy"
title="California Sales Tax Calculator">
</iframe>






Swap california for any state slug in our 50-state directory and you get the exact same calculator, live, on their page.






Why an iframe wins over a JS SDK





  1. Zero JS on their side. No npm install, no webpack, no CSP conflicts. Blogs on Medium, WordPress, Ghost all accept iframes.


  2. Style isolation. Their CSS cannot break my calculator; my CSS cannot break their page. Same-origin cookies stay separate.


  3. Instant updates. When 2027 rates change I re-render the embed on my server; every embedder gets the new data with zero action.


  4. Server-side render. First byte is HTML; renders before their JS even starts. No layout shift.






The endpoint shape






GET /api/sales-tax/:state
→ { state, code, state_sales_tax_pct, avg_combined_sales_tax_pct, grocery_taxed, lodging_taxes[...] }

GET /api/embed/sales-tax/:state
→ text/html with calculator + inline styles + a small vanilla-JS calc handler






Both endpoints hit the same underlying dataset: github.com/receiptedit/us-sales-tax-2026 (MIT, ~29 KB JSON for all 50 states).






What I would do differently



Add a ?theme=dark and ?anchor=<affiliate-id> query. And ship a per-city variant, not just per-state.






Try it



API: https://receiptedit.com/api/sales-tax

Embed: https://receiptedit.com/api/embed/sales-tax/california

Source: https://github.com/receiptedit/us-sales-tax-2026

Product: https://receiptedit.com



Happy to answer questions on the widget architecture — it is genuinely simpler than it looks.

Zum Aktualisieren ziehen
ZERO-DAY CVE-2026-17636 | IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow…
Advisory →
TTS Reader • tsecurity.de Voice
tsecurity.de Icon
tsecurity.de App
Offline-Lesen, Eilmeldungen & 0ms Ladezeit

Installiere tsecurity.de direkt auf deinen Home-Bildschirm für das ultimative Vollbild-Magazinerlebnis ohne Browser-Leisten.

Nächster Beitrag
Themen-Radar & Intelligence Matrix
Echtzeit-Taxonomie nach Angriffsvektoren & Plattformen

tsecurity.de Live Threat Radar

🔴 LIVE RADAR
MONITORING
AKTIV
CVE-DATENBANK
LIVE
🔍
Community Radar & Live Chat
Sentinel Bot online • Live-Stream
Dein Cluster: Security Explorer
Match:
lädt…
Verbindung zum Community-Stream wird aufgebaut...
Bearbeitungsmodus — Senden überschreibt deine Nachricht
Community-Puls — was gerade passiert
lädt…
Aktivitäten deiner Analysten
lädt…
Neues Thema oder Eilmeldung einreichen

Reiche interessante Links, Zero-Days oder Debatten ein. Die Community entscheidet per Upvote über die Veröffentlichung.

Heiß diskutierte Einreichungen
🔖 Gespeicherte Artikel
📂 Keine gespeicherten Artikel vorhanden.
Zurück Ziehen Vor
Links: vorheriger Artikel Rechts: nächster Artikel unten: schließen
News NIS-2 Frühwarnung Tier-1 Intel ⏱️ 3 Min vor 10 Min
Artikeldaten werden geladen...

Zurück: vorheriger Vor: nächster
↗ Original-Quelle
Social Reaktionen Deine Reaktion zählt
Einstufung & Relevanz-Poll 0 Stimmen
In sozialen Netzwerken teilen 1-Klick