Many console errors on your checkout page because key JavaScript and AJAX calls are

[user65622]

What is the name of the domain?

ELIKIA BUSINESS : Votre expert e-commerce depuis 2019

What is the error number?

I am seeing many console errors on your checkout page as key JavaScript and AJAX calls are being blocked by security rules.

What is the error message?

Many console errors on your checkout page because key JavaScript and AJAX calls are blocked by security rules.

What is the issue you’re encountering

Hello Following the security issues we are experiencing, can you guide us to resolve this security issue that was reported to us by Woocommerce in the attached comment? Hi there, Thanks for reaching back out and sharing those screenshots of the error on your checkout page. I am seeing many console errors on your checkout page as key JavaScript and AJAX calls are being blocked by security rules. For example: Full Size: Markup 2024-12-23 at 09.59.52.png - Droplr I would recommend: reviewing your Cloudflare security settings, or temporarily disabling it as a test reviewing your caching plugin settings, or temporarily disabling them as a test Hello, Thank you for your help, we will check with cloudflare Sincerely, Gael

Was the site working with SSL prior to adding it to Cloudflare?

Yes

What is the current SSL/TLS setting?

Full

What are the steps to reproduce the issue?

Hello
Following the security issues we are experiencing, can you guide us to resolve this security issue that was reported to us by Woocommerce in the attached comment?

Hi there,

Thanks for reaching back out and sharing those screenshots of the error on your checkout page.

I am seeing many console errors on your checkout page as key JavaScript and AJAX calls are being blocked by security rules.

For example: Full Size: Markup 2024-12-23 at 09.59.52.png - Droplr

I would recommend:
reviewing your Cloudflare security settings, or temporarily disabling it as a test
reviewing your caching plugin settings, or temporarily disabling them as a test

Screenshot of the error

[cloonan]

Can you see the blocks in your WAF events tab? here, https://dash.cloudflare.com/?to=/:account/:zone/security/events? If so, you can craft a rule to allow those to pass, put the rule as the first in your list of WAF rules (if you have others), create teh rule here, https://dash.cloudflare.com/?to=/:account/:zone/security/waf/tools/

[fritex]

@user65622

JavaScript and AJAX calls

May I ask if Rocket Loader is enabled?
Try disabling it from Cloudflare dashboard.
Purge Everything from the Cloudflare cache as well.

Enable Rocket Loader · Cloudflare Speed docs

@user65622

are being blocked by security rules

Allow your WordPress/origin web server IP address by adding it to the IP Access Rules as follows on the article below with the “allow” action:

Create an IP Access rule · Cloudflare Web Application Firewall (WAF) docs

@user65622

For example: Full Size: Markup 2024-12-23 at 09.59.52.png - Droplr

That’s the CSP header.
May I ask if you’ve added it manually through the Cloudflare, or rather it’s coming from the web server itself, or via some WordPress plugin?

Furthermore, I haven’t seen WooCommerce having such inline script encoded like below:

I’d suggest enabling the debug and disabling WordPress plugins to see which one is printing this. Therefrom, troubleshooting where from does the Content Security Policy headers come from, otherwise you’re loading some resources from a sub-domain which isn’t allowed by the Access Policy or CORS.

[user65622]

Hello,
Thank you for your help