Skip to main content

I'm using Content-Security-Policy (CSP) on my website. And have setup CSP as below as per mentioned at the google developers documentation (Frequently Asked Questions  |  reCAPTCHA  |  Google for Developers😞

- script-src https://www.google.com/recaptcha/, https://www.gstatic.com/recaptcha/
- frame-src https://www.google.com/recaptcha/, https://recaptcha.google.com/recaptcha/

But browser devtools console indicated that is an error related to CSP occurred which related to CSP's directive "connect-src". But as I find thru the developer's documentation, can't find any document mentioned that we need to setup for "connect-src" as well. 

My question is that is it necessary to setup CSP's directives "connect-src"? If yes, is there any document highlighted about it?

 

 

 

Be the first to reply!

Reply