The root of the issue though, seems to lie with a company called @CardinalCommerc - they appear to provide the checkout code, and in Chrome it's their modules which trigger the 3DS call They load different stuff for Firefox and that change earlier in the flow breaks the 3DS call