Content security policy stops recaptcha

Brave Browser Web Compatibility
,
1

Unable to login to a site because of a recaptcha fail/ not showing up.

I have tried disabling shields, removing all extensions, allowing all cookies, clearing all cookies and cached data, using a private window, using a vpn, going to https://testrecaptcha.github.io/ recaptcha test site and passed it. I’ve even tried several different browsers, chrome, libre wolf and firefox and they all have the same recaptcha fail/ not showing. The last thing i can try is restarting my router as even brave on a tablet also has the same problems with my desktop browser.

But on the site below, i can’t login to it because of the recaptcha failing and not even showing up. So i opened up the developer tools to check if there were any errors with the recaptcha and it shows there are.

Loading the script ‘https://www.gstatic.com/recaptcha/releases/gYdqkxiddE5aXrugNbBbKgtN/recaptcha__en.js’ violates the following Content Security Policy directive:

asda
asda1910×749 255 KB

Expected result: to work as expected

Reproduces how often: always

Operating System and Brave Version =

windows 10

Brave 1.86.148 (Official Build) (64-bit)

Chromium: 144.0.7559.133

I also note that there are no grecaptcha’ cookies being stored when i check .

2

@6gsa8gg897dsfg6987g6

In general, for reCAPTCHA to have a chance of working, you need to Allow domains/hostnames, esp. re possible JavaScript sources:

google.com
googleapis.com
gstatic.com
recaptcha.net
ssl.gstatic.com
www.google.com
www.gstatic.com
www.recaptcha.net

I suggest, that, while using a Brave Browser New Window, and AFTER using the Reset permissions button at the following brave://... links, you manually set JavaScript to Allow, for each of the following domains/hostnames - google.com, gstatic.com, googleapis.com, recaptcha.net:

brave://settings/content/siteDetails?site=https%3A%2F%2Fgoogle.com
brave://settings/content/siteDetails?site=https%3A%2F%2Fgstatic.com
brave://settings/content/siteDetails?site=https%3A%2F%2Fgoogleapis.com
brave://settings/content/siteDetails?site=https%3A%2F%2Frecaptcha.net

Then Exit / Quit everything and Restart computer.

Tips regarding Brave Shields:

I have more success, with:

  • Brave Shields UP, but . . .
  • Either Allow All Cookies or Block 3rd Party Cookies, but NOT Blocking All Cookies
  • Allowing JavaScripts from specific sources, but NOT Allowing All JavaScripts
  • Trackers & Ads treatment: Aggressive (at first), and then incrementally relaxing that setting
  • Fingerprinting (aka footprinting) blocking: Strict (at first), and then incrementally relaxing that setting

I almost NEVER use:

  • All of Brave Shields UP
  • All of Brave Shields DOWN

Shields Basics

How do I configure global and site-specific Shields settings?

How do I use Shields while browsing?

Yet, there may be an issue with something at brave://settings/shields/filters . . . and you wait for Brave Support.

3

Thanks for the help, and so far the site is allowing me to log in again, i’m not sure if it was because of your advice or just down to the shitty site as this log in/recatpcha problem has happened on and off multiple times over the past several months, and seeing as the same error happens on my phone, tablet and all those other tested browsers, so i think the simple answer is it’s down to the website.

Thank you for the help all the same