leroymerlin.ru - most pages misrendered

For support with specific websites

Moderator: trava90

Forum rules
Please always mention the name/domain of the website in question in your topic title.
Please one website per topic thread (to help keep things organized). While behavior on different sites might at first glance seem similar, they are not necessarily caused by the same.

Please try to include any relevant output from the Toolkit Error Console or the Developer Tools Web Console using the following procedure:
  1. Clear any current output
  2. Navigate or refresh the page in question
  3. Copy and paste Errors or seemingly relevant Warnings into a single [ code ] block.
User avatar
motoprogger
Moongazer
Moongazer
Posts: 7
Joined: 2022-08-13, 06:54

leroymerlin.ru - most pages misrendered

Unread post by motoprogger » 2022-08-13, 10:58

leroymerlin.ru is the website of a construction material shop. Most of its pages are rendered the wrong way, but the main page has suffered the most.
This is the main page: https://leroymerlin.ru/
This is an example page of the goods sold: https://leroymerlin.ru/product/truba-po ... -18746724/
The errors visible in the console when rendering the main page are:

Code: Select all

Strict-Transport-Security: The site specified a header that could not be parsed successfully.[Learn More]
...
Strict-Transport-Security: The site specified a header that could not be parsed successfully.[Learn More]
The resource from “https://get.shoppilot.ru/f/v1//__omnibox_v2__/styles/omnibox.css” was blocked due to MIME type mismatch (X-Content-Type-Options: nosniff).  
leroymerlin.ru
DEBUG root: start refresh script  refreshAuth.min.js:1:18495
DEBUG root: wait for access-expire-date cookie  refreshAuth.min.js:1:18495
Duplicate agent injection detected, turning off redundant initConfig.  ruxitagentjs_ICA27Vdfghjqrux_10245220704125537.js:4:240
InitConfig not found or agent already initialized! This is an injection issue.  ruxitagentjs_ICA27Vdfghjqrux_10245220704125537.js:54:35
Duplicate agent injection detected, turning off redundant asyncCore.  ruxitagentjs_ICA27Vdfghjqrux_10245220704125537.js:278:115
WARNING: Module "2" already enabled!
...
WARNING: Module "x" already enabled!  
The resource from “https://get.shoppilot.ru/f/v1//__omnibox_v2__/styles/omnibox.css” was blocked due to MIME type mismatch (X-Content-Type-Options: nosniff).  leroymerlin.ru
SyntaxError: ':not(:defined)' is not a valid selector  elbrus-ui.min.cc524d6fa7fd38c45e5fb52486de5e6b.js:2
	o https://leroymerlin.ru/etc.clientlibs/elbrus/clientlibs/elbrus-ui.min.cc524d6fa7fd38c45e5fb52486de5e6b.js:2:63681
	l< https://leroymerlin.ru/etc.clientlibs/elbrus/clientlibs/elbrus-ui.min.cc524d6fa7fd38c45e5fb52486de5e6b.js:2:64667
	<anonymous> https://leroymerlin.ru/etc.clientlibs/elbrus/clientlibs/elbrus-ui.min.cc524d6fa7fd38c45e5fb52486de5e6b.js:2:64946
	c https://leroymerlin.ru/etc.clientlibs/elbrus/clientlibs/elbrus-ui.min.cc524d6fa7fd38c45e5fb52486de5e6b.js:2:315
	<anonymous> https://leroymerlin.ru/etc.clientlibs/elbrus/clientlibs/elbrus-ui.min.cc524d6fa7fd38c45e5fb52486de5e6b.js:2:33289
	c https://leroymerlin.ru/etc.clientlibs/elbrus/clientlibs/elbrus-ui.min.cc524d6fa7fd38c45e5fb52486de5e6b.js:2:315
	<anonymous> https://leroymerlin.ru/etc.clientlibs/elbrus/clientlibs/elbrus-ui.min.cc524d6fa7fd38c45e5fb52486de5e6b.js:2:13572
	<anonymous> https://leroymerlin.ru/etc.clientlibs/elbrus/clientlibs/elbrus-ui.min.cc524d6fa7fd38c45e5fb52486de5e6b.js:2:2
Strict-Transport-Security: The site specified a header that could not be parsed successfully.[Learn More]
...
Strict-Transport-Security: The site specified a header that could not be parsed successfully.[Learn More]  
ReferenceError: customElements is not defined[Learn More]
StrictTransportSecurity seems to complain for every resource fetched from this domain. This is the example header of the main page itself:

Code: Select all

Strict-Transport-Security: max-age=31536000; includeSubdomains; preload, max-age=31536000; preload
The only network error is 404 on https://get.shoppilot.ru/f/v1//__omnibo ... mnibox.css

User avatar
Moonchild
Pale Moon guru
Pale Moon guru
Posts: 35571
Joined: 2011-08-28, 17:27
Location: Motala, SE
Contact:

Re: leroymerlin.ru - most pages misrendered

Unread post by Moonchild » 2022-08-13, 12:21

The errors thrown are pretty self-explanatory. Pale Moon is blocking a stylesheet (which is likely why it renders poorly) because they specify "nosniff" but the css file in question doesn't match the sent mime type. So either it's not a css file or they send the wrong mime type header. That is a server-side issue
So is throwing invalid STS headers at the browser.
The webmaster needs to fix their server config. Either lay off the STS and nosniff, or make sure what is sent is to-spec.
"Sometimes, the best way to get what you want is to be a good person." -- Louis Rossmann
"Seek wisdom, not knowledge. Knowledge is of the past; wisdom is of the future." -- Native American proverb
"Linux makes everything difficult." -- Lyceus Anubite

User avatar
motoprogger
Moongazer
Moongazer
Posts: 7
Joined: 2022-08-13, 06:54

Re: leroymerlin.ru - most pages misrendered

Unread post by motoprogger » 2022-08-13, 15:43

The resource in question of

Code: Select all

The resource from “https://get.shoppilot.ru/f/v1//__omnibox_v2__/styles/omnibox.css” was blocked due to MIME type mismatch (X-Content-Type-Options: nosniff).  leroymerlin.ru
Is the same as the resource mentioned later as giving error 404. This URL produces an actual error 404 if I try it with wget.
Firefox 91.11.0esr (64-bit) renders this page OK despite complaining:

Code: Select all

GET https://get.shoppilot.ru/f/v1//__omnibox_v2__/styles/omnibox.css	[HTTP/2 404 Not Found 37ms]
The resource from “https://get.shoppilot.ru/f/v1//__omnibox_v2__/styles/omnibox.css” was blocked due to MIME type (“text/html”) mismatch (X-Content-Type-Options: nosniff).	leroymerlin.ru
So I suggest that CSS missing doesn't contribute to misrendering this site at all. Probably the reference was left carelessly when upgrading the website.

User avatar
Moonchild
Pale Moon guru
Pale Moon guru
Posts: 35571
Joined: 2011-08-28, 17:27
Location: Motala, SE
Contact:

Re: leroymerlin.ru - most pages misrendered

Unread post by Moonchild » 2022-08-13, 16:46

Unfortunately I can't investigate because I get this:
Image1.png
"Sometimes, the best way to get what you want is to be a good person." -- Louis Rossmann
"Seek wisdom, not knowledge. Knowledge is of the past; wisdom is of the future." -- Native American proverb
"Linux makes everything difficult." -- Lyceus Anubite

User avatar
motoprogger
Moongazer
Moongazer
Posts: 7
Joined: 2022-08-13, 06:54

Re: leroymerlin.ru - most pages misrendered

Unread post by motoprogger » 2022-08-20, 13:09

The website somehow prevents me from downloading the page with wget (401 Unauthorized even with User-Agent set the same as Firefox), but allows to see in a browser. Here is what I've downloaded with Firefox. It still makes some network activity on open, but the top part keeps rendering correctly in Firefox and not in Pale Moon with network disconnected.
http://www.fileconvoy.com/dfl.php?id=g7 ... 13a575590b (the link is valid for 14 days).

User avatar
bSun0000
Apollo supporter
Apollo supporter
Posts: 36
Joined: 2022-03-22, 23:32

Re: leroymerlin.ru - most pages misrendered

Unread post by bSun0000 » 2022-08-21, 19:23

This website requires ShadowDOM and customElements. ShadowDOM polyfill rejects to work in Palemoon with error: ':not(:defined)' is not a valid selector

Locked