Add generic hCaptcha CSP support and tests (ref: ChatGPT conversation https://chatgpt.com/share/6929f2ba-cedc-800f-9c4c-2049810cea94)

2025-12-03 07:59:42 +00:00 · 2025-11-28 20:06:58 +01:00
parent 2132356f02
commit c2a181edd4
7 changed files with 69 additions and 27 deletions
--- a/roles/web-app-listmonk/config/main.yml
+++ b/roles/web-app-listmonk/config/main.yml
@@ -6,6 +6,7 @@ features:
  central_database:         true
  oidc:                     true
  logout:                   true
+  hcaptcha:                 true
 server:
  domains:
    canonical:
@@ -17,12 +18,6 @@ server:
    flags:
      script-src-elem:
        unsafe-inline:  true
-    whitelist:
-      script-src-elem:
-        - "https://www.hcaptcha.com"
-        - "https://js.hcaptcha.com"
-      frame-src:
-        - "https://newassets.hcaptcha.com/"
 docker:
  services:
    database: