Stop CleverPush SDK from breaking Shopware in-page anchor clicks (CP-11185)

[snuricp]

Problem

On Shopware 6 product detail pages, clicking the review stars / review link (a standard Shopware link with href="#review-tab-..." and data-remote-click="true") fails to open the review tab in ~90% of cases and instead lets the browser navigate back to the previous category page.

Root cause (per CP-11185): the CleverPush loader script (https://static.cleverpush.com/channel/loader/{channelId}.js) installs a delegated global click handler whose shouldHandle(e) is too permissive. Whenever it matches, the handler runs:

e.preventDefault();
e.stopImmediatePropagation();
this.notify(...);

For Shopware-internal anchor links this kills Shopware's native hash/tab-switch logic. Disabling the plugin resolves it; removing direct listeners on the link does not (confirming a delegated global listener is the source).

Fix

This Shopware plugin only injects the remote loader, so we cannot patch shouldHandle here. Instead, the Twig template now emits a tiny inline guard before the async loader.

The guard registers a delegated click listener on document (bubble phase). Because listeners on the same EventTarget fire in registration order, ours runs before the SDK's later-registered handler. For elements that match a conservative "Shopware-internal navigation" selector list it calls stopImmediatePropagation() so the SDK's handler is never invoked for those clicks, leaving Shopware's element-level handlers (RemoteClickPlugin, Bootstrap toggles, native hash navigation) intact.

Selectors covered:

• a[href^="#"] – any internal anchor
• [data-remote-click] – Shopware's RemoteClickPlugin
• [data-bs-toggle], [data-toggle] – Bootstrap 5 / 4 toggles (tabs, collapses, modals)
• .product-detail-reviews-link – the specific review link called out in the ticket

Outbound links and other clicks remain handled by CleverPush as before, so push-notification UX is preserved.

Files changed

• src/Resources/views/storefront/base.html.twig

Manual test plan

1. Configure the plugin with a CleverPush Channel ID and load any Shopware 6 PDP that renders the review tab.
2. Click the review stars / "X reviews" link.
3. Expected: the review tab opens (Shopware's RemoteClickPlugin activates) and the URL hash becomes #review-tab-.... No back-navigation to the category page.
4. Sanity-check: click any external/outbound link (not matching the selectors above) – CleverPush's normal click handling still runs.

Refs CP-11185.

Linear Issue: CP-11185

  

---

Summary by cubic

Prevents the CleverPush SDK from blocking Shopware in-page anchor clicks, fixing the PDP review tab not opening and unexpected back navigation. Keeps CleverPush handling for outbound clicks while allowing Shopware’s hash/tab logic to run. Ref: CP-11185

• Bug Fixes
  • Injects a small inline guard in src/Resources/views/storefront/base.html.twig before the async CleverPush loader.
  • Adds a document-level click listener that runs first and stops propagation for internal navigation targets: a[href^="#"], [data-remote-click], [data-bs-toggle], [data-toggle], .product-detail-reviews-link.
  • Non-matching clicks still flow to the CleverPush handler.

^{Written for commit d3c0819. Summary will update on new commits.}

[cursor]

Cursor Bugbot has reviewed your changes using default mode and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit d3c0819. Configure here.}

[cursor]

Guard over-blocks all document-level handlers, not just CleverPush

Medium Severity

Calling stopImmediatePropagation() on document in the bubble phase blocks ALL subsequently-registered document-level and window-level click handlers—not just CleverPush's. Because the inline script runs before any async/deferred JavaScript, this affects every other tool that uses document-level delegation for click tracking (e.g., Google Analytics, Matomo, Hotjar, or other Shopware plugins). The a[href^="#"] selector is especially broad, matching every hash link on the page including common href="#" JavaScript-action anchors, making silent breakage of analytics or other plugins likely.

Additional Locations (1)

• src/Resources/views/storefront/base.html.twig#L38-L45

 

^{Reviewed by Cursor Bugbot for commit d3c0819. Configure here.}