Can't sign up due to Content-Security-Policy issue
When opening https://www.zotero.org/user/register, the captcha iframe doesn't show up.
The console says,
Refused to frame 'https://www.recaptcha.net/' because it violates the following Content Security Policy directive: "frame-src 'self' https://www.google.com".
I find some discussions about this on stackoverflow.
https://stackoverflow.com/questions/39853162/recaptcha-with-content-security-policy
Could you fix this ASAP?
The console says,
Refused to frame 'https://www.recaptcha.net/' because it violates the following Content Security Policy directive: "frame-src 'self' https://www.google.com".
I find some discussions about this on stackoverflow.
https://stackoverflow.com/questions/39853162/recaptcha-with-content-security-policy
Could you fix this ASAP?
and Microsoft Edge 44.18362.449.0
I couldn't reproduce this on Chrome or Edge with the old settings, but I know certain versions of Edge at least have treated the frame and calling script domains differently, so I've added both to the allowed frame rule. Hopefully that solves the problem for you. This is working for most users.