Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

recaptcha_v3 causing Content Security Policy: Ignoring “'unsafe-inline'” #386

Open
yoshie902a opened this issue Feb 27, 2021 · 2 comments

Comments

@yoshie902a
Copy link

yoshie902a commented Feb 27, 2021

When placing recaptcha_tags or recaptcha_v3 in my view, I now get a ton of console warnings that did not previously exist...

21:56:10.619 Content Security Policy: Ignoring “'unsafe-inline'” within script-src: ‘strict-dynamic’ specified
21:56:10.619 Content Security Policy: Ignoring “https:” within script-src: ‘strict-dynamic’ specified
21:56:10.619 Content Security Policy: Ignoring “http:” within script-src: ‘strict-dynamic’ specified
21:56:10.628 Content Security Policy: Ignoring “'unsafe-inline'” within script-src: ‘strict-dynamic’ specified
21:56:10.628 Content Security Policy: Ignoring “https:” within script-src: ‘strict-dynamic’ specified
21:56:10.628 Content Security Policy: Ignoring “http:” within script-src: ‘strict-dynamic’ specified
21:56:10.642 Content Security Policy: Ignoring “'unsafe-inline'” within script-src: ‘strict-dynamic’ specified
21:56:10.642 Content Security Policy: Ignoring “https:” within script-src: ‘strict-dynamic’ specified
21:56:10.642 Content Security Policy: Ignoring “http:” within script-src: ‘strict-dynamic’ specified
21:56:10.655 Content Security Policy: Ignoring “'unsafe-inline'” within script-src: ‘strict-dynamic’ specified
21:56:10.655 Content Security Policy: Ignoring “https:” within script-src: ‘strict-dynamic’ specified
21:56:10.655 Content Security Policy: Ignoring “http:” within script-src: ‘strict-dynamic’ specified
21:56:10.659 Content Security Policy: Ignoring “'unsafe-inline'” within script-src: ‘strict-dynamic’ specified
21:56:10.659 Content Security Policy: Ignoring “https:” within script-src: ‘strict-dynamic’ specified
21:56:10.659 Content Security Policy: Ignoring “http:” within script-src: ‘strict-dynamic’ specified
21:56:10.674 Content Security Policy: Ignoring “'unsafe-inline'” within script-src: ‘strict-dynamic’ specified
21:56:10.674 Content Security Policy: Ignoring “https:” within script-src: ‘strict-dynamic’ specified
21:56:10.674 Content Security Policy: Ignoring “http:” within script-src: ‘strict-dynamic’ specified
21:56:10.691 Content Security Policy: Ignoring “'unsafe-inline'” within script-src: ‘strict-dynamic’ specified
21:56:10.691 Content Security Policy: Ignoring “https:” within script-src: ‘strict-dynamic’ specified
21:56:10.691 Content Security Policy: Ignoring “http:” within script-src: ‘strict-dynamic’ specified
21:56:10.746 Content Security Policy: Ignoring “'unsafe-inline'” within script-src: ‘strict-dynamic’ specified
21:56:10.746 Content Security Policy: Ignoring “https:” within script-src: ‘strict-dynamic’ specified
21:56:10.746 Content Security Policy: Ignoring “http:” within script-src: ‘strict-dynamic’ specified
21:56:12.516 Content Security Policy: Ignoring “'unsafe-inline'” within script-src: ‘strict-dynamic’ specified
21:56:12.516 Content Security Policy: Ignoring “https:” within script-src: ‘strict-dynamic’ specified
21:56:12.516 Content Security Policy: Ignoring “http:” within script-src: ‘strict-dynamic’ specified
21:56:12.516 Content Security Policy: Ignoring “'unsafe-inline'” within script-src: ‘strict-dynamic’ specified
21:56:12.516 Content Security Policy: Ignoring “https:” within script-src: ‘strict-dynamic’ specified
21:56:12.516 Content Security Policy: Ignoring “http:” within script-src: ‘strict-dynamic’ specified
21:56:12.712 Content Security Policy: Ignoring “'unsafe-inline'” within script-src: ‘strict-dynamic’ specified
21:56:12.712 Content Security Policy: Ignoring “https:” within script-src: ‘strict-dynamic’ specified
21:56:12.712 Content Security Policy: Ignoring “http:” within script-src: ‘strict-dynamic’ specified
etc. 

@grosser
Copy link
Collaborator

grosser commented Feb 27, 2021 via email

@yoshie902a
Copy link
Author

No, I wish I did, otherwise I would create a PR for it.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants