paypal.com

[dcable]

Hello,

I am a developer with a client that has an ecommerce site braintreegateway.com. PayPal Braintree Drop In UI Not Loading - Whitelist Please

They've been having a few customers each day call in complaining that they don't get a "payment form" when they go to checkout.

After finally getting a frustrated customer to do a screen share session, I discovered they were running uBlock . Disabling it and refreshing the page let the payment form reappear, so I was finally able to track it down to this service.

It's preventing the Braintree Drop-In UI from working, because they are hosting their assets with PayPal, and you are blocking the subsequent load of assets.

So this original file does load. But as a part of the wire-up, the braintree plugin is grabbing PayPal assets.

Code: Select all

<script src="https://js.braintreegateway.com/web/dropin/1.12.0/js/dropin.min.js"></script>

That script is pulling assets from

Code: Select all

https://c.paypal.com/da/r/fb.js

This address is getting blocked by easyprivacy.

Here's some screenshot https://i.imgur.com/xmEQcti.png

That prevents the customers from being able to pay. We have no other ads at all on our site, and unfortunately most of our customers are not knowledgeable enough to even know they are running an ad blocker. Sometimes they installed it like a year ago and forgot, sometimes other people installed it for them. Most of the customers know just enough to check their email and shop online. The concepts of pausing it, adding our site to the whitelist, etc is beyond them. They just start cussing and talking about how shitty our website is.

I am not sure why PayPal's c. subdomain is blocked, since they are highly reputable and do not serve ad content.

Can you please Whitelist this, or remove this from your Blacklist, however your logic is setup.

Thanks!!

[intense]

How can be tested ? Which is the site where http://c.paypal.com/da/r/fb.js is blocked ?

[dcable]

https://www.sunnylandfarms.com


You can replicate it as an authenticated user or a guest.
You have to add a few items to your cart and walk through the Checkout page.

When you get to https://www.sunnylandfarms.com/Checkout, that page should load the braintree payment form, that's when the resource gets blocked.

They basically render the form on the site, it's how the drop in UI works. It uses JS and AJAX to go grab some assets and "drop" the UI in place.

[intense]

well, asking for a lot of info .. could you send me a test account here: xxxxxxx

[dcable]

I just sent you the following content to your email, with the password in there.

Go Here :
https://www.sunnylandfarms.com/Account/Login

Email Address : xxxxxx
Password : REDACTED- FIND IT IN YOUR EMAIL

Click Login

Now, click this Link :

https://www.sunnylandfarms.com/Checkout

If you have uBlock active and open the log and filter on “Block”, you will see url for c.paypal.com being suppressed.
The payment form will not render.

If you then Pause uBlock, and reload the page, you will see the payment form appear.

Please feel free to email me directly if you need anything else on this.

Thanks for all your help!

[intense]

fixed in unbreak list (uBo)
https://github.com/uBlockOrigin/uAssets ... 8d9ed5ec12

just tell your users to force an update of unbreak list (or purge / update all the lists in dashboard / filter lists section) ... or wait for automatic update

[intense]

I sent to @smed79 all the indications to test the issue (for an easyprivacy PR)

[dcable]

You all are awesome, thanks so much!

[smed79]

fixed in unbreak list

Did you test

Code: Select all

||c.paypal.com/da/r/fb.js$script,redirect=noopjs

for an easyprivacy PR

It is about whitelisting an unnecessary dependency, so I will leave this task to EasyPrivacy authors.
(maybe i am wrong but in my opinion, the problem should be fixed by braintreegateway.com which should remove the dependency to the tacking script).

Anyway, reported here https://github.com/easylist/easylist/commit/886bebbba9e

[Khrin]

maybe i am wrong but in my opinion, the problem should be fixed by braintreegateway.com which should remove the dependency to the tacking script

You aren't.

[fanboy]

I use paypal often, if I can get reproducible steps (without actually transfering money). Then we can review this.

[bkatyaya]

PayPal.com is a well know payment site and 'c.paypal.com' is official domain of PayPal.

Our customers are unable to use 'PayPal Checkout' buttons because our domain c.paypal.com is blocked.
It filters out 'c.paypal.com' based on 'https://easylist.to/easylist/easyprivacy.txt' file.

Could you please remove c.paypal.com from block list as soon as possible.

Following is one of the example of the paypal checkout button not rendering:

Code: Select all

https://seekingalpha.com/checkout?service_id=mp_316

On the above site, please select 'CHOOSE PAYMENT METHOD' as 'paypal':
Without 'UBlock Origin' extension: 'PayPal Checkout' button is rendered.
With 'UBlock Origin' extension: 'PayPal Checkout' button is not rendered.

This is occuring on both firefox and chrome browsers.

[smed79]

@fanboy FYI, the filter ##.subscribe-container (Fanboy's Annoyance List) hide the subscribtion form for the mentioned above site.

[bkatyaya]

could you please provide an update on this?

[intense]

Does this filter fix your issue (not only for seekingalpha but for all broken pages ) ?

Code: Select all

@@||c.paypal.com/da/r/fb.js$script

[bkatyaya]

Yes. This will solve the issue for all broken pages.

[intense]

waiting a fix from easyprivacy authors => fixed for uBo (uBlock origin adblocker)
https://github.com/uBlockOrigin/uAssets ... 794bf200fa

[fanboy]

Okay. Added.

https://github.com/easylist/easylist/co ... 38147f232d

[bkatyaya]

Hi,

Which release of UBlock origin will have the fix incorporated.
Could you please let me know how to get development drop of UBlock origin with this fix for testing purpose.

Thanks,
Katya.

[intense]

see above => it was fixed in easyprivacy list. The fix will arrive for all users in 3-4-5 days

[bkatyaya]

In firefox, 'https://c.paypal.com/da/r/fb.js' is not blocked anymore and i can see 'PayPal Checkout'.
In chrome, 'https://c.paypal.com/da/r/fb.js' is still blockes, it shows the error that it is blocked based on

'chrome-extension://cjpalhdlnbpafiamejdnhcphjbkeiagm/asset-viewer.html?url=easyprivacy' list which blocks domain 'c.paypal.com'.

[intense]

update your lists in uBo

[smed79]

In chrome, 'https://c.paypal.com/da/r/fb.js' is still blockes

Tested, no blocked in chrome => https://imgur.com/ivN59pH.png

[bkatyaya]

Hi,

In chrome, I still see that

Code: Select all

https://c.paypal.com/v1/r/d/i?js_src=https://c.paypal.com/da/r/fb.js

is blocked.
The above url is not blocked in Firefox.
Could you please whitelist the above url also.

Thanks,
Katya.

[intense]

yes, that request is blocked (it's a frame and not the script already whitelisted) - tested on seekingalpha - but the button is visible and is working fine.

If you have another test case where the button is missing just let us know.

[bkatyaya]

In the https://seekingalpha.com/checkout?service_id=mp_316 same site, fb.js script is invoked in iframe which makes couple of calls. As this is blocked, the calls are not triggered. Would it be possible to whitelist the iframe call also.

[intense]

@bkatyaya You always have to tell us WHAT is broken in this case. What is broken ? I get the paypal window, calling paypal etc etc.

[bkatyaya]

Nothing is broken on the User Interface, the only issue now is some of the POST/GET calls are not triggered because of this block.

[intense]

Are you sure if easyprivacy authors will add

@@||c.paypal.com/*/da/r/fb.js$subdocument

all your problems will be fixed ?

[bkatyaya]

Not all problems but yes for this site for this page alone issue will be solved.
Other similar

Code: Select all

https://c.paypal.com/webstatic/r/fb/fb-all-prod.pp2.min.js

'fb-all-prod.pp.min.js', 'fb-all-prod.fbi.min.js' scripts and many more are also blocked.