Payment-Links are really easy to use, but not only for me, also for all others how can see the link it the web-page source. They can try "to do things" with the link. Wallee even tell them what the link expect as a parameter e.g. "currency"
I woud like to see a field "allowed domains" in the paymentlink configuration section, where I can enter my domain-name(s) and wallee will then test the origin of the paymentlink-activation and prevents it's running, if it is not actiated from one of the given domains.
I can do this with my vimeo videos embedded as an iframe.