Can't sign up due to Content-Security-Policy issue
When opening https://www.zotero.org/user/register, the captcha iframe doesn't show up.
The console says,
Refused to frame 'https://www.recaptcha.net/' because it violates the following Content Security Policy directive: "frame-src 'self' https://www.google.com".
I find some discussions about this on stackoverflow.
https://stackoverflow.com/questions/39853162/recaptcha-with-content-security-policy
Could you fix this ASAP?
The console says,
Refused to frame 'https://www.recaptcha.net/' because it violates the following Content Security Policy directive: "frame-src 'self' https://www.google.com".
I find some discussions about this on stackoverflow.
https://stackoverflow.com/questions/39853162/recaptcha-with-content-security-policy
Could you fix this ASAP?
This is an old discussion that has not been active in a long time. Before commenting here, you should strongly consider starting a new discussion instead. If you think the content of this discussion is still relevant, you can link to it from your new discussion.
and Microsoft Edge 44.18362.449.0
I couldn't reproduce this on Chrome or Edge with the old settings, but I know certain versions of Edge at least have treated the frame and calling script domains differently, so I've added both to the allowed frame rule. Hopefully that solves the problem for you. This is working for most users.