Do ecommerce site shopping carts need no follow atts?

[SEObleu.com]

Not sure if this matters?

[EricaMcGillivray]

Yes, they do need the meta tag:

While you can use robots.txt to block bots, the problem is URLs can still show up in Google searches (minus any information) and this can create an easy playground for hackers. Check out the section here called: "Why Meta Robots is better than robots.txt"