Walmart.com - can't add item to cart, etc.

[nos101]

With NoScript enabled (now on 2.9.0.4, but I think had the problem before), on walmart.com I cannot ADD an item to cart, and cannot select a store at top of page, even when I do allow all this page multiple times, and all warnings at bottom of page are gone, Walmart.com is unusable! Please Help!

[barbaz]

viewtopic.php?f=7&t=21623 ?

[therube]

I thought that too, but he says ADD rather then not being able to log in.

URL: Toothbrush

Allowing Globally, clicking 'Add to Cart', seems to do nothing:

Error Console shows a bunch of stuff like:

Code: Select all

[NoScript] Blocking cross-site Javascript served from http://ll-us-i5.wal.co/dfw/63fd9f59-bd92/k2-_e3db6f3f-bb49-4b26-ad59-3ab8987390ea.v27.js-7a19b435de26ab8b51e5309d2761bcbc83e41a6b with wrong type info application/jav and included by http://www.walmart.com/ip/Health-HP-STX-Ultra-High-Powered-Sonic-Electric-Toothbrush-with-Dock-Charger-10-Brush-Heads-Value-Pack/46273032

Code: Select all

[NoScript HTTPS] AUTOMATIC SECURE on https://beacon.walmart.com: btc=S21vB5x9ePilu4xGeY_7fM; domain=beacon.walmart.com; path=/; Secure

So while actions taken may be different, underling cause looks like it will be the same.

[nos101]

This from the other thread bypassed the problem. Is there any security downside using this? Thanks!

From the other thread mentioned above (I think it is suggesting Walmart correct their code)...

Yep, that's it (maybe both the two messages that are re-quoted by me?). It's a server error, you'll need to contact them (be sure to point them to this thread) to let them know it's happening and causing problems. "application/jav" should be "application/javascript".

While waiting for them to respond, try this work-around:
about:config > noscript.inclusionTypeChecking.exceptions
add on the end, separated by a space

Code: Select all

.wal.co/*.js*

[Thrawn]

It should be reasonably safe. The server that hosts the script has an error, but presumably the script content is still properly controlled by Walmart, and is in fact designed to be included directly in a page.

[barbaz]

I don't think it's likely that Walmart's CDN has files that are terribly susceptible to the type of abuse that this protection is designed to prevent (but what do I know ). In any case hopefully it's only a temporary issue anyway.