Option 2 POC

Static wrapper in an iframe

The parent page owns non-sensitive fields and fake save behavior. A separate static page inside an iframe owns the TokenEx field and tokenization call.

Add Credit Card

Credit Card #