Uploaded image for project: 'phpBB3'
  1. phpBB3
  2. PHPBB3-16610

Cross site scripting issue using reCAPTCHA

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Awaiting Information (View Workflow)
    • Priority: Minor
    • Resolution: Unresolved
    • Affects Version/s: 3.3.1
    • Fix Version/s: None
    • Component/s: Login
    • Labels:
    • Environment:
      PHP 7.3

      Description

      With reCaptcha V3 enabled, when registering and submitting the registration form the following error message appeared at the bottom of the screen:

      Could not connect to the reCAPTCHA service. Please check your internet connection and reload to get a reCAPTCHA challenge.

      The browser console indicated it was caused by a cross scripting error. It appears that if you are calling reCaptcha from http instead of https this introduces the cross scripting issue. Changing the board to use and force https solved the issue.

        Attachments

          Activity

            People

            Assignee:
            Unassigned
            Reporter:
            MarkDHamill MarkDHamill
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

              Dates

              Created:
              Updated: