Magento1

we are developing a magento store using latest version 2.4.8 magento csp is not allowing external domain & js including knockoutjs,cloudflarejs etc.., in checkout page. To resolve this we have created a csp whitelist custome module in our store “app/code/” folder. please check our csp_whitelist.xml <csp_whitelist xmlns:xsi=”http://www.w3.org/2001/XMLSchema-instance” xsi:noNamespaceSchemaLocation=”urn:magento:module:Magento_Csp:etc/csp_whitelist.xsd”> requirejs/require.js knockout.js […]

MSI enabled, but Magento_CatalogInventory observers still trigger (N+1 risk). Can we rely solely on MSI observers? Context We run with MSI enabled, yet Magento_CatalogInventory observers are still active: <!-- From CatalogInventory --> <event name="sales_quote_item_collection_products_after_load"> <observer name="add_stock_items" instance="MagentoCatalogInventoryObserverAddStockItemsObserver"/> </event> <event name="sales_quote_item_qty_set_after"> <observer name="inventory" instance="MagentoCatalogInventoryObserverQuantityValidatorObserver"/> </event> MSI also registers: <event name="sales_quote_item_collection_products_after_load"> <observer […]

Yesterday Magento release another patch for a critical RCE vulnerability in REST APIs. They automatically protected Cloud customers with WAF rules on Fastly, but left a hotfix patch for other customers. Hotfix patch that might affect complex api calls and take hours to fix and apply if endpoint is affected. […]

Magento 2 how to get payment method using jquery or knockout when customer click on payment method,need to get selected payment method code. requirejs-config.js var config = { map: { '*': { checkoutjs: 'Magento_Checkout/js/myfile' } } }; myfile.js define( [ 'jquery', 'ko', 'Magento_Checkout/js/model/quote', 'jquery/jquery-storageapi', ], function($, ko ,quote) { 'use […]

Retailers know how quickly eCommerce expectations change. Shoppers move seamlessly between devices, channels and platforms, expecting the… Continue reading on Medium »