It's the usual Javascript dependency thing. The web app isn't degrading gracefully for secure browsers. At least the site is *not* #; the ordering and checkout works perfectly well without Javascript, and properly adds the items cost on the checkout page.