Just noticed this excellent info when making a ticket purchase from a train company site. STILL, over FOUR YEARS LATER. I noticed it as I whitelist my scripts, nothing gets to run active content on my system without authorisation. So often, when I make a purchase, I have to switch the protection off, or it doesn’t work, or partially works. Due completely to the site launching one or more external domain requests at the order confirm page. Why are there so many awful designers out there getting repeat employment for years on end?! For me, it’s the site I’m using, the external payment processing site, if present, then the bank’s own site for the verification stage, THEN this securesuite, because the bank also use that. Yeah, I’m super-confident in the security there… Idiot banks.
↧