Impossible de payer facture avec Firefox

[phm3]

Quelque chose a été changé

Dans la console, plusieurs erreurs :

Loading failed for the <script> with source “https://service.maxymiser.net/api/eu/orange.fr/7ee59a/mmapi.js”. 9068592832:14:1

Loading failed for the <script> with source “https://c.woopic.com/libs/common/o_load_responsive.js”. 9068592832:53:1

Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at https://c.woopic.com/fonts/HelvNeue75_W1G.woff2. (Reason: CORS request did not succeed).

downloadable font: download failed (font-family: "HelvNeueOrange" style:normal weight:700 stretch:100 src index:0): bad URI or cross-site access not allowed source: https://c.woopic.com/fonts/HelvNeue75_W1G.woff2

downloadable font: download failed (font-family: "HelvNeueOrange" style:normal weight:700 stretch:100 src index:1): bad URI or cross-site access not allowed source: https://c.woopic.com/fonts/HelvNeue75_W1G.woff

DEPRECATED: DI is instantiating a token "t" that inherits its @Injectable decorator but does not provide one itself. This will become an error in v10. Please add @Injectable() to the "t" class. vendors.9ae1224d73d07be32a97.js:490:3203

Requesting search results.. search_results.js:1:9

Some cookies are misusing the recommended “sameSite“ attribute 6

ERROR TypeError: "window.utag is undefined"

    track https://ec1.s.woopic.com/ecm-static/ecm-app/10.8.2/static/js/ecm-core.04e596eee558751f1caf.js:1

    unstackAllCallbacks https://ec1.s.woopic.com/ecm-static/ecm-app/10.8.2/static/js/ecm-core.04e596eee558751f1caf.js:1

    track https://ec1.s.woopic.com/ecm-static/ecm-app/10.8.2/static/js/ecm-core.04e596eee558751f1caf.js:1

    insertScript https://ec1.s.woopic.com/ecm-static/ecm-app/10.8.2/static/js/ecm-core.04e596eee558751f1caf.js:1

    invokeTask https://ec1.s.woopic.com/ecm-static/ecm-app/10.8.2/static/js/vendors.9ae1224d73d07be32a97.js:2580

    onInvokeTask https://ec1.s.woopic.com/ecm-static/ecm-app/10.8.2/static/js/vendors.9ae1224d73d07be32a97.js:1093

    invokeTask https://ec1.s.woopic.com/ecm-static/ecm-app/10.8.2/static/js/vendors.9ae1224d73d07be32a97.js:2580

    runTask https://ec1.s.woopic.com/ecm-static/ecm-app/10.8.2/static/js/vendors.9ae1224d73d07be32a97.js:2580

    invokeTask https://ec1.s.woopic.com/ecm-static/ecm-app/10.8.2/static/js/vendors.9ae1224d73d07be32a97.js:2580

    y https://ec1.s.woopic.com/ecm-static/ecm-app/10.8.2/static/js/vendors.9ae1224d73d07be32a97.js:2611

    b https://ec1.s.woopic.com/ecm-static/ecm-app/10.8.2/static/js/vendors.9ae1224d73d07be32a97.js:2611

vendors.9ae1224d73d07be32a97.js:258:207

Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at https://c.woopic.com/Magic/Sosh-Medium.woff. (Reason: CORS request did not succeed).

Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at https://c.woopic.com/Magic/Sosh-Bold.woff. (Reason: CORS request did not succeed).

downloadable font: download failed (font-family: "SoshMedium" style:normal weight:400 stretch:100 src index:0): bad URI or cross-site access not allowed source: https://c.woopic.com/Magic/Sosh-Medium.woff

downloadable font: download failed (font-family: "SoshMedium" style:normal weight:700 stretch:100 src index:0): bad URI or cross-site access not allowed source: https://c.woopic.com/Magic/Sosh-Bold.woff

ERROR TypeError: "window.utag is undefined"

    track https://ec1.s.woopic.com/ecm-static/ecm-app/10.8.2/static/js/ecm-core.04e596eee558751f1caf.js:1

    trackView https://ec1.s.woopic.com/ecm-static/ecm-app/10.8.2/static/js/ecm-core.04e596eee558751f1caf.js:1

    __tryOrUnsub https://ec1.s.woopic.com/ecm-static/ecm-app/10.8.2/static/js/vendors.9ae1224d73d07be32a97.js:2404

    next https://ec1.s.woopic.com/ecm-static/ecm-app/10.8.2/static/js/vendors.9ae1224d73d07be32a97.js:2404

    _next https://ec1.s.woopic.com/ecm-static/ecm-app/10.8.2/static/js/vendors.9ae1224d73d07be32a97.js:2404

    next https://ec1.s.woopic.com/ecm-static/ecm-app/10.8.2/static/js/vendors.9ae1224d73d07be32a97.js:2404

    _next https://ec1.s.woopic.com/ecm-static/ecm-app/10.8.2/static/js/vendors.9ae1224d73d07be32a97.js:1709

vendors.9ae1224d73d07be32a97.js:258:207

Au passage, avoir des librairies de sites tiers sur une page de paiement est très dangereux !

[phm3]

Et après paiement (via Chromium) :

Loading failed for the <script> with source “https://service.maxymiser.net/api/eu/orange.fr/7ee59a/mmapi.js”. confirmation:14:1

Loading failed for the <script> with source “https://c.woopic.com/libs/common/o_load_responsive.js”. confirmation:53:1

Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at https://c.woopic.com/fonts/HelvNeue55_W1G.woff2. (Reason: CORS request did not succeed).

Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at https://c.woopic.com/fonts/HelvNeue75_W1G.woff2. (Reason: CORS request did not succeed).

downloadable font: download failed (font-family: "HelvNeueOrange" style:normal weight:400 stretch:100 src index:0): bad URI or cross-site access not allowed source: https://c.woopic.com/fonts/HelvNeue55_W1G.woff2

downloadable font: download failed (font-family: "HelvNeueOrange" style:normal weight:700 stretch:100 src index:0): bad URI or cross-site access not allowed source: https://c.woopic.com/fonts/HelvNeue75_W1G.woff2

Loading failed for the <script> with source “https://ec1.s.woopic.com/ecm-static/ecm-app/10.8.2/static/js/ecm-facture-paiement.b5bae98efa1e0d90fb...”. confirmation:1:1

ERROR Error: "Uncaught (in promise): Error: Loading chunk 5 failed. (error: https://ec1.s.woopic.com/ecm-static/ecm-app/10.8.2/static/js/ecm-facture-paiement.b5bae98efa1e0d90fb...) d@https://ec1.s.woopic.com/ecm-static/ecm-app/10.8.2/static/js/ecm-core.04e596eee558751f1caf.js:1:2583 D@https://ec1.s.woopic.com/ecm-static/ecm-app/10.8.2/static/js/vendors.9ae1224d73d07be32a97.js:2596:12... u</t.prototype.invokeTask@https://ec1.s.woopic.com/ecm-static/ecm-app/10.8.2/static/js/vendors.9ae1224d73d07be32a97.js:2580:76... onInvokeTask@https://ec1.s.woopic.com/ecm-static/ecm-app/10.8.2/static/js/vendors.9ae1224d73d07be32a97.js:1093:16... u</t.prototype.invokeTask@https://ec1.s.woopic.com/ecm-static/ecm-app/10.8.2/static/js/vendors.9ae1224d73d07be32a97.js:2580:76... s</e.prototype.runTask@https://ec1.s.woopic.com/ecm-static/ecm-app/10.8.2/static/js/vendors.9ae1224d73d07be32a97.js:2580:28... c</e.invokeTask@https://ec1.s.woopic.com/ecm-static/ecm-app/10.8.2/static/js/vendors.9ae1224d73d07be32a97.js:2580:87... y@https://ec1.s.woopic.com/ecm-static/ecm-app/10.8.2/static/js/vendors.9ae1224d73d07be32a97.js:2611:63... b@https://ec1.s.woopic.com/ecm-static/ecm-app/10.8.2/static/js/vendors.9ae1224d73d07be32a97.js:2611:87... "

    A https://ec1.s.woopic.com/ecm-static/ecm-app/10.8.2/static/js/vendors.9ae1224d73d07be32a97.js:2588

    A https://ec1.s.woopic.com/ecm-static/ecm-app/10.8.2/static/js/vendors.9ae1224d73d07be32a97.js:2588

    M https://ec1.s.woopic.com/ecm-static/ecm-app/10.8.2/static/js/vendors.9ae1224d73d07be32a97.js:2588

    invokeTask https://ec1.s.woopic.com/ecm-static/ecm-app/10.8.2/static/js/vendors.9ae1224d73d07be32a97.js:2580

    onInvokeTask https://ec1.s.woopic.com/ecm-static/ecm-app/10.8.2/static/js/vendors.9ae1224d73d07be32a97.js:1093

    invokeTask https://ec1.s.woopic.com/ecm-static/ecm-app/10.8.2/static/js/vendors.9ae1224d73d07be32a97.js:2580

    runTask https://ec1.s.woopic.com/ecm-static/ecm-app/10.8.2/static/js/vendors.9ae1224d73d07be32a97.js:2580

    m https://ec1.s.woopic.com/ecm-static/ecm-app/10.8.2/static/js/vendors.9ae1224d73d07be32a97.js:2580

    invokeTask https://ec1.s.woopic.com/ecm-static/ecm-app/10.8.2/static/js/vendors.9ae1224d73d07be32a97.js:2580

    y https://ec1.s.woopic.com/ecm-static/ecm-app/10.8.2/static/js/vendors.9ae1224d73d07be32a97.js:2611

    b https://ec1.s.woopic.com/ecm-static/ecm-app/10.8.2/static/js/vendors.9ae1224d73d07be32a97.js:2611

vendors.9ae1224d73d07be32a97.js:258:207

Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at https://c.woopic.com/fonts/HelvNeue55_W1G.woff. (Reason: CORS request did not succeed).

Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at https://c.woopic.com/fonts/HelvNeue75_W1G.woff. (Reason: CORS request did not succeed).

downloadable font: download failed (font-family: "HelvNeueOrange" style:normal weight:400 stretch:100 src index:1): bad URI or cross-site access not allowed source: https://c.woopic.com/fonts/HelvNeue55_W1G.woff

downloadable font: download failed (font-family: "HelvNeueOrange" style:normal weight:700 stretch:100 src index:1): bad URI or cross-site access not allowed source: https://c.woopic.com/fonts/HelvNeue75_W1G.woff

Requesting search results.. search_results.js:1:9

Cookie “proxyIn_fr_a” will be soon rejected because it has the “sameSite” attribute set to “none” or an invalid value, without the “secure” attribute. To know more about the “sameSite“ attribute, read https://developer.mozilla.org/docs/Web/HTTP/Headers/Set-Cookie/SameSite current

[labougeotte]

Bonjour @phm3 

Est il utile de mettre le détail ?

[phm3]

Est il utile de poser cette question ? Est-ce que ça résout le bug? Il y a un bug, faut-il éluder les messages d'erreurs ?

[phm3]

Rien de perso, juste ras le bol de la "police des forums" sur la longueur des messages. Je n'y peut rien si il y a plein d'erreurs dans leur scripts. S'il y avait une assistance Sosh par mail, je pourrais leur faire parvenir, mais nous sommes réduits à s'auto-dépanner sur un forum (limité à 2600 caractères).

[labougeotte]

@phm3 

Sosh est une offre 100% en ligne. Il n'y a pas de contact par téléphone ou par email.

Contactez un conseiller par echat.

[pascom]

Bonjour,

Je pense que cette erreur est due au bloqueur de publicité.

En effet, quand je tentais d'accéder à l'historique de mes factures, j'obtenais la même erreur. Après avoir désactivé le bloqueur de publicité (uBlock Origin dans mon cas), j'ai pu y accéder sans problème. Le bloqueur de publicité devait bloquer l'un des scripts qui chargeait l'objet utag.
Cordialement,

Pascom

[phm3]

Hmmm, j'ai aussi uBlock, j'ai pensé à désactiver Noscript mais pas uBlock.

C'est peut être ça.

Merci, je vais voir à la prochaine facture dans pas longtemps.

Cela dit, des scripts tiers sur une page de règlement de facture, c'est pas une bonne pratique.

Il faut partir du principe que tout service tiers peut logger les entrées claviers (keylogger).