Can't sign up due to Content-Security-Policy issue

When opening https://www.zotero.org/user/register, the captcha iframe doesn't show up.

The console says,
Refused to frame 'https://www.recaptcha.net/' because it violates the following Content Security Policy directive: "frame-src 'self' https://www.google.com".

I find some discussions about this on stackoverflow.
https://stackoverflow.com/questions/39853162/recaptcha-with-content-security-policy

Could you fix this ASAP?
  • What browser and version?
  • Tested on Google chrome 78.0.3904.70 (32 bit)
    and Microsoft Edge 44.18362.449.0
  • That github issue is unrelated (that was due to a bug in recaptcha that they fixed and generated a different error than you're reporting).

    I couldn't reproduce this on Chrome or Edge with the old settings, but I know certain versions of Edge at least have treated the frame and calling script domains differently, so I've added both to the allowed frame rule. Hopefully that solves the problem for you. This is working for most users.
  • And it works! Thank you.
Sign In or Register to comment.