Fix Content Security Policy sometimes unnecessarily allowing hCaptcha scripts (#26388)
1 files changed, 3 insertions(+), 1 deletions(-) M app/controllers/concerns/captcha_concern.rb
M app/controllers/concerns/captcha_concern.rb => app/controllers/concerns/captcha_concern.rb +3 -1
@@ 42,7 42,7 @@ module CaptchaConcern end def extend_csp_for_captcha! policy = request.content_security_policy policy = request.content_security_policy&.clone return unless captcha_required? && policy.present? @@ 54,6 54,8 @@ module CaptchaConcern policy.send(directive, *values) end request.content_security_policy = policy end def render_captcha