SRC/OTP/DCF in browser (Click to Pay widget only). Payment POST is server-side via api/c2p_pay.php - not browser ajax to ACI.
api/c2p_pay.php