Avalara - Returns for Small Business - Issues in App Listing

Avalara
Shopify Partner
13 0 5

Team,

 

We (Avalara) have an existing app registered in Shopify and this time we are publishing a new app - Returns for Small Business. Post listing, few findings to fix ClickJacking is rectified. However, back and back again, the same finding is popping up. Please assist if there is any other fix recomended. Thanks 

 

You can review the recording for reference: 

Recording: https://avalara.zoom.us/rec/share/djkRbqXMtFkw4EOdg1GvVLkpS5RjefDr2vrQuBO4tNho8nn-Q2zM_tyuRYOmgpg2.Q... 

(Passcode: D*=CaH1x)

 

Email: ConnectorDev@avalara.com

 

Regards, 

Arun Manglick

arun.manglick@avalara.com

Replies 2 (2)

Avalara
Shopify Partner
13 0 5

Request, if any workaround here. Thanks 

 

Email: ConnectorDev@avalara.com

 

Regards, 

Arun Manglick

arun.manglick@avalara.com

Avalara
Shopify Partner
13 0 5

All, Somehow recording is not accessible. Attaching snapshots depicting code meeting ClickJacking requirements from all endpoints called by Shopify. Looking forward for a solution. Thanks 

 

1). App Installation:

Avalara_0-1646802033218.png

 

2). Redirect Call from Shopify

Avalara_1-1646802088438.png

 

3). Shopfiy Callback to confirm charges

 

Avalara_2-1646802104413.png