Slots game online,Free Buffalo slots Aristocrat.Recharge Every day and Get Bonus up-to 50%!

Resolved stafca
(@stafca)

3 years, 10 months ago

Hi,

I am started with Cookies and Content Security Policy for a few weeks,
and have an issue with loading of Google Recaptcha.
I’ve did the setting with the Quickstart.

This occured in the active mode. In the admin mode the iframe showed up.

In active mode:
<div><div class=”grecaptcha-badge” data-style=”bottomright” style=”width: 256px; height: 60px; display: block; transition: right 0.3s ease 0s; position: fixed; bottom: 14px; right: -186px; box-shadow: gray 0px 0px 5px; border-radius: 2px; overflow: hidden;”><div class=”grecaptcha-logo”><iframe src=”https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LeOidEUAAAAAP1dY6lwDTLj4JdQxM9mN_YdMRy4&co=aHR0cHM6Ly9hbml0YWZsZWVyYWNrZXJzLmJlOjQ0Mw..&hl=en&v=r8jtf1oixV0IGff4hgB4EzDF&size=invisible&cb=hui4030c5a5″ width=”256″ height=”60″ role=”presentation” name=”a-qggcn3idrtie” frameborder=”0″ scrolling=”no” sandbox=”allow-forms allow-popups allow-same-origin allow-scripts allow-top-navigation allow-modals allow-popups-to-escape-sandbox” class=”warning-cacsp-iframe”></iframe><div class=”warning-cacsp-iframe-content” style=”height: 60px; width: 256px; margin-top: -60px;”><div class=”warning-cacsp-iframe-content-text”>De inhoud kan niet worden geladen, omdat het niet is toegestaan op de site.</div><div class=”warning-cacsp-iframe-content-button”>Contacteer de beheerder</div></div></div><div class=”grecaptcha-error”></div><textarea id=”g-recaptcha-response-100000″ name=”g-recaptcha-response” class=”g-recaptcha-response” style=”width: 250px; height: 40px; border: 1px solid rgb(193, 193, 193); margin: 10px 25px; padding: 0px; resize: none; display: none;”></textarea></div><iframe style=”display: none;”></iframe></div>

In admin mode
<div class=”rc-anchor-pt”>Privacy<span aria-hidden=”true” role=”presentation”> – </span>Terms</div>

I am looking forward to solve this.

Thank you,
Staf

The page I need help with: [log in to see the link]

Viewing 10 replies - 1 through 10 (of 10 total)

Plugin Author Johan Jonk Stenstr?m
(@jonkastonka)

3 years, 10 months ago

And when you have it in admin mode, you were logged in or logged out?

It should work as long as you have https://www.google.com/ in Always > Experience.

Is it ReCaptcha v3?

Thread Starter stafca
(@stafca)

3 years, 10 months ago

Hi Johan,

In admin mode I was logged in.

Yes it is ReCapcha v3.

Thread Starter stafca
(@stafca)

3 years, 10 months ago

Additional, in admin mode it worked also in logged out situation.

Plugin Author Johan Jonk Stenstr?m
(@jonkastonka)

3 years, 10 months ago

Yes, in admin mode only admins has the plugin activated so that is expected.

Using the admin mode and being logged in should give you the same result as active. I’ll take a look at this within a couple of days.

How did you implement the Recaptcha, via a plugin or what?

Thread Starter stafca
(@stafca)

3 years, 10 months ago

I implemeted Google Recaptcha v3 via the plugin Contact Form 7 (v.5.3.2 now)

Thread Starter stafca
(@stafca)

3 years, 10 months ago

Hi Johan,

Thanks for your suggestion:

It should work as long as you have https://www.google.com/ in Always > Experience.

I did as follows:
Always allow -> Scripts: https://www.google.com/
Always allow -> Frames: https://www.google.com/
Experience -> Scripts: https://www.google.com/
Experience -> Frames: https://www.google.com/

And removed:
Experience -> Scripts: https://www.recaptcha.net
Experience -> Frames: https://www.recaptcha.net

https://www.recaptcha.net was introduced by the Quickstart -> Recaptcha v3 rules, but this URL gives a 404 error.

<iframe src=”https://www.google.com/recaptcha/api2/anchor?” width=”256″ height=”60″ role=”presentation” name=”a-8mhce4aeyxh7″ frameborder=”0″ scrolling=”no” sandbox=”allow-forms allow-popups allow-same-origin allow-scripts allow-top-navigation allow-modals allow-popups-to-escape-sandbox”></iframe>

So the error is solved.

Thanks again,
Staf

Plugin Author Johan Jonk Stenstr?m
(@jonkastonka)

3 years, 10 months ago

@stafca When I tested Recaptcha it did fetch javascript from https://www.recaptcha.net/, even though they do not have anything in the root of that domain. And furthermore “Always allow” I don’t think that for Google.com is a good idea if you for instance have Google Ads on your site. Then they will go through Always and you have tracking cookies set.

I have added https://www.google.com/ to Experience -> Scripts though, as you wrote. Thanks!

ReCaptcha is a tough one, and I have some ideas for a future release to make it work even better.

Thread Starter stafca
(@stafca)

3 years, 10 months ago

Hi Johan,

Thank you for your email.

I have narrowed the google link in always allow as follows:

Always allow -> Scripts: https://www.google.com/recaptcha/
Always allow -> Frames: https://www.google.com/recaptcha/

and with the result, the Recaptcha popup isn’t load properly anymore.

I am using Cookies and Content Security Policy v.1.73

Looking forward to hear from you.
Best Regards,
Staf

Plugin Author Johan Jonk Stenstr?m
(@jonkastonka)

3 years, 10 months ago

https://www.google.com/recaptcha/ is not a domain, it should https://www.google.com/

Thread Starter stafca
(@stafca)

3 years, 10 months ago

Thank you

Viewing 10 replies - 1 through 10 (of 10 total)

The topic ‘Content Security Policy blocks Google recaptcha’ is closed to new replies.