Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

get recaptcha for CSP #40

Closed
haoqili opened this issue Jul 7, 2011 · 1 comment
Closed

get recaptcha for CSP #40

haoqili opened this issue Jul 7, 2011 · 1 comment
Labels
2 - medium Demo Authentication Demo CSP

Comments

@haoqili
Copy link
Owner

haoqili commented Jul 7, 2011

No description provided.

@haoqili
Copy link
Owner Author

haoqili commented Jul 7, 2011

added "http://www.google.com" and "https://www.googl.com" in CSP_ALLOW in settings

--> #41 "CSP: Directive "inline script base restriction" violated"

haoqili added a commit that referenced this issue Jul 7, 2011
@haoqili
:( #41, #40, CSP not showing Google Recaptcha
07c6ecd
haoqili added a commit that referenced this issue Jul 8, 2011
@haoqili
:( #41, #40 trying to circumvent document.write('<script>... in googl…
7b4cff3 
…e recaptcha js. failed. --> try amo registration recaptcha
haoqili added a commit that referenced this issue Jul 9, 2011
@haoqili
:( ?? #41, #40, amo uses same django-recaptcha as me. Same in-body sc…
ffc7e6e 
…ript. Why does theirs work but not me? I have coppied CSP to be identical
haoqili added a commit that referenced this issue Jul 11, 2011
@haoqili
:( #41, #40 ALMOST THERE! I know why amo recaptcha doesn't have the p…
843cc5f 
…roblem, because it uses a RecaptchaOptions! have a bug in include_tag, almost there though!!!
haoqili added a commit that referenced this issue Jul 11, 2011
@haoqili
:?) #40, #41. 2 break throughs, 1 question. BT1: change into amo regi…
06f8258 
…ster's custom RecaptchaOptions to avoid in-body script. BT2: have to allow setInterval like 'CSP_OPTIONS = ("eval-script",)'. Q1 #45 How come amo register does not have "setInterval blocked by CSP" problem even without CSP_OPTIONS?
@haoqili haoqili closed this as completed Jul 11, 2011
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
2 - medium Demo Authentication Demo CSP
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@haoqili