Recaptcha audio does not work with CSP

[haoqili]

Warnings from firebug:

CSP: Directive "inline script base restriction" violated
onclick attribute on A element

CSP: Directive "object-src 'none'" violated by https://www.google.com/recaptcha/api//img/audiocaptcha.swf?v2

Gotta fix some onclicks ... bsterne suggested:
"add an id and then from external script say document.getElementById(your_id).onclick = your_function"
I also have http://curioushq.blogspot.com/2011/07/when-you-cant-onclick.html

[haoqili]

The onclick fix doesn't solve the problem (but makes the warning go away).

The second, "object-src 'none'" is found for the working addons mozilla register as well. --> edit: but remember amo doesn't enforce CSP.

So I think there is some more stuff I need to investigate for onclick

[haoqili]

Just had to add the policy to deal with CSP_OBJECT_SRC to allow google