diff options
| author | Claire <claire.github-309c@sitedethib.com> | 2022-01-24 19:06:19 +0100 |
|---|---|---|
| committer | Claire <claire.github-309c@sitedethib.com> | 2022-01-24 21:22:13 +0100 |
| commit | 1b493c9fee954b5bd4c4b00f9f945a5d97e2d699 (patch) | |
| tree | 902087cb4c658f83570db7aa7ae08d324e1a94ef /app/controllers/about_controller.rb | |
| parent | e58e0eb9aa375b1107b207e8229a2142c4edc0b8 (diff) | |
Add optional hCaptcha support
Fixes #1649 This requires setting `HCAPTCHA_SECRET_KEY` and `HCAPTCHA_SITE_KEY`, then enabling the admin setting at `/admin/settings/edit#form_admin_settings_captcha_enabled` Subsequently, a hCaptcha widget will be displayed on `/about` and `/auth/sign_up` unless: - the user is already signed-up already - the user has used an invite link - the user has already solved the captcha (and registration failed for another reason) The Content-Security-Policy headers are altered automatically to allow the third-party hCaptcha scripts on `/about` and `/auth/sign_up` following the same rules as above.
Diffstat (limited to 'app/controllers/about_controller.rb')
| -rw-r--r-- | app/controllers/about_controller.rb | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/app/controllers/about_controller.rb b/app/controllers/about_controller.rb index 620c0ff78..5a35dbbcb 100644 --- a/app/controllers/about_controller.rb +++ b/app/controllers/about_controller.rb @@ -2,6 +2,7 @@ class AboutController < ApplicationController include RegistrationSpamConcern + include CaptchaConcern before_action :set_pack @@ -12,6 +13,7 @@ class AboutController < ApplicationController before_action :set_instance_presenter before_action :set_expires_in, only: [:more, :terms] before_action :set_registration_form_time, only: :show + before_action :extend_csp_for_captcha!, only: :show skip_before_action :require_functional!, only: [:more, :terms] |