XSS warning breaks shopping process!
Posted: Mon Nov 02, 2009 8:49 am
Hi,
I have a website with a shop. The site does not use Javascript at all. The shop (https) has some encrypted paypal form at last shopping step. The form is a POST to paypal (https). When a user with NoScript clicks on the submit button he does not get to the PayPal login page (to finalize the order) but to the PayPal main page! There is a small warning at the page top (noscript info bar) scaring users.
I have a website with a shop. The site does not use Javascript at all. The shop (https) has some encrypted paypal form at last shopping step. The form is a POST to paypal (https). When a user with NoScript clicks on the submit button he does not get to the PayPal login page (to finalize the order) but to the PayPal main page! There is a small warning at the page top (noscript info bar) scaring users.