Page 1 of 1

Walmart.com - can't add item to cart, etc.

Posted: Mon Feb 22, 2016 8:48 am
by nos101
With NoScript enabled (now on 2.9.0.4, but I think had the problem before), on walmart.com I cannot ADD an item to cart, and cannot select a store at top of page, even when I do allow all this page multiple times, and all warnings at bottom of page are gone, Walmart.com is unusable! Please Help!

Re: Walmart.com - can't add item to cart, etc.

Posted: Mon Feb 22, 2016 4:37 pm
by barbaz

Re: Walmart.com - can't add item to cart, etc.

Posted: Mon Feb 22, 2016 9:28 pm
by therube
I thought that too, but he says ADD rather then not being able to log in.

URL: Toothbrush

Allowing Globally, clicking 'Add to Cart', seems to do nothing:

Error Console shows a bunch of stuff like:

Code: Select all

[NoScript] Blocking cross-site Javascript served from http://ll-us-i5.wal.co/dfw/63fd9f59-bd92/k2-_e3db6f3f-bb49-4b26-ad59-3ab8987390ea.v27.js-7a19b435de26ab8b51e5309d2761bcbc83e41a6b with wrong type info application/jav and included by http://www.walmart.com/ip/Health-HP-STX-Ultra-High-Powered-Sonic-Electric-Toothbrush-with-Dock-Charger-10-Brush-Heads-Value-Pack/46273032

Code: Select all

[NoScript HTTPS] AUTOMATIC SECURE on https://beacon.walmart.com: btc=S21vB5x9ePilu4xGeY_7fM; domain=beacon.walmart.com; path=/; Secure
So while actions taken may be different, underling cause looks like it will be the same.

Re: Walmart.com - can't add item to cart, etc.

Posted: Mon Feb 22, 2016 11:12 pm
by nos101
This from the other thread bypassed the problem. Is there any security downside using this? Thanks!

From the other thread mentioned above (I think it is suggesting Walmart correct their code)...
barbaz wrote:Yep, that's it (maybe both the two messages that are re-quoted by me?). It's a server error, you'll need to contact them (be sure to point them to this thread) to let them know it's happening and causing problems. "application/jav" should be "application/javascript".

While waiting for them to respond, try this work-around:
about:config > noscript.inclusionTypeChecking.exceptions
add on the end, separated by a space

Code: Select all

.wal.co/*.js*

Re: Walmart.com - can't add item to cart, etc.

Posted: Mon Feb 22, 2016 11:14 pm
by Thrawn
It should be reasonably safe. The server that hosts the script has an error, but presumably the script content is still properly controlled by Walmart, and is in fact designed to be included directly in a page.

Re: Walmart.com - can't add item to cart, etc.

Posted: Tue Feb 23, 2016 1:07 am
by barbaz
I don't think it's likely that Walmart's CDN has files that are terribly susceptible to the type of abuse that this protection is designed to prevent (but what do I know ;) ). In any case hopefully it's only a temporary issue anyway.