diff --git a/app/Http/Middleware/RedirectLegacyQrToLadillLink.php b/app/Http/Middleware/RedirectLegacyQrToLadillLink.php
index 3e3d799..edf00d7 100644
--- a/app/Http/Middleware/RedirectLegacyQrToLadillLink.php
+++ b/app/Http/Middleware/RedirectLegacyQrToLadillLink.php
@@ -19,6 +19,12 @@ class RedirectLegacyQrToLadillLink
             return $next($request);
         }
 
+        // Same-origin AJAX from product-hosted pages must not 307 to ladl.link
+        // (cross-origin fetch has no CORS → checkout sheet never opens).
+        if ($request->ajax() || $request->expectsJson() || $request->wantsJson()) {
+            return $next($request);
+        }
+
         return LadillLink::legacyRedirect($request);
     }
 }