Solved recaptcha csp bug (propably will lead to other bugs, which then need to be solved)

filter_plugins/csp_filters.py

@@ -91,6 +91,7 @@ class FilterModule(object):
                 'frame-ancestors',
                 'frame-src',
                 'script-src',
+                'script-src-elem',
                 'style-src',
                 'font-src',
                 'worker-src',
@@ -115,11 +116,11 @@ class FilterModule(object):
                         tokens.append(f"{web_protocol}://{matomo_domain}")
 
                 # ReCaptcha integration: allow loading scripts from Google if feature enabled
-                if (
+                if self.is_feature_enabled(applications, 'recaptcha', application_id):
-                    self.is_feature_enabled(applications, 'recaptcha', application_id)
+                    if directive == 'script-src':
-                    and directive == 'script-src'
+                        tokens.append('https://www.google.com')
-                ):
+                    if directive == 'script-src-elem':
-                    tokens.append('https://www.google.com')
+                        tokens.append('https://www.gstatic.com')
 
                 # Enable loading via ancestors
                 if (

roles/docker-bigbluebutton/tasks/main.yml

@@ -3,6 +3,11 @@
 - name: "include docker-compose role"
   include_role: 
     name: docker-compose
+  vars:
+    database_instance:  "{{ application_id }}"
+    database_password:  "{{ applications[application_id].credentials.postgresql_secret }}"
+    database_username:  "postgres"
+    database_name:      ""                              # Multiple databases
 
 - name:                 "Seed BigBlueButton Database for Backup"
   include_tasks:        "{{ playbook_dir }}/roles/backup-docker-to-local/tasks/seed-database-to-backup.yml"

roles/docker-bigbluebutton/vars/configuration.yml

@@ -15,3 +15,9 @@ features:
 domains:
   canonical:
     - "meet.{{ primary_domain }}"
+csp:  
+  flags:
+    script-src:
+      unsafe-inline:  true
+    style-src:
+      unsafe-inline:  true