reCaptcha images are missing on the user-registration page

VERIFIED FIXED in 5.12.1

Status

addons.mozilla.org Graveyard
Public Pages
--
major
VERIFIED FIXED
8 years ago
2 years ago

People

(Reporter: stephend, Assigned: clouserw)

Tracking

unspecified
5.12.1

Details

(URL)

(Assignee)

Comment 1

8 years ago
Nope, good catch though, it is CSP:

WARNING CSP Violation Report:  (Request: GET https://preview.addons.mozilla.org/en-US/firefox/users/register HTTP/1.1) (Blocked: https://api-secure.recaptcha.net/challenge?k=6LffawIAAAAAAHpU3AOLYJuuleA63N2IpMsINglf) (Rule: script-src https://preview.addons.mozilla.org http://pm-app-amo24.mozilla.org

Oddly enough, it appears the web console doesn't report all the CSP actions like blocking images and stuff.  That seems like an Fx bug.
Assignee: nobody → clouserw
Target Milestone: --- → 5.12.1
(Assignee)

Comment 2

8 years ago
http://github.com/jbalogh/zamboni/commit/0155a5b9e7128dc728d48cf5af24a7f5ecb21561
Status: NEW → RESOLVED
Last Resolved: 8 years ago
Resolution: --- → FIXED
Images still aren't showing up, and clicking on any reCaptcha-provided link results in:

14:55:43.832: Recaptcha is not defined @ https://preview.addons.mozilla.org/media/js/common-min.js?build=b85801d Line: 36

(I made sure to clear local cache, etc.)
Status: RESOLVED → REOPENED
Resolution: FIXED → ---
Wil, I think the change to report-only mode for CSP fixed this; can you confirm and mark it? https://preview.addons.mozilla.org/en-US/firefox/users/register
(Assignee)

Comment 5

8 years ago
(In reply to comment #4)
> Wil, I think the change to report-only mode for CSP fixed this; can you confirm
> and mark it? https://preview.addons.mozilla.org/en-US/firefox/users/register

It "fixed" it in as much that the rules aren't enforced anymore. :)  However, I moved some rules around so that this is working properly afaik, even with csp on.
Status: REOPENED → RESOLVED
Last Resolved: 8 years ago8 years ago
Resolution: --- → FIXED
Product: addons.mozilla.org → addons.mozilla.org Graveyard
You need to log in before you can comment on or make changes to this bug.