Recaptcha Newsletter still uses inline scripts --> CSP warnings #337
Open
Description
Preconditions (*)
1.Magento 2.4.7-p1
2.Default CSP config and whitelisting, no customizations. Please notice that default CSP policies blocks inline scripts in the checkout page.
3.Block for newsletter signup is shown in every page, including checkout. Block has a recaptcha validation.
Steps to reproduce (*)
1.Go to checkout.
2.Check browser console.
3.Notice the CSP warnings, attached screenshots in the following points.
Expected result (*)
- Module should use the rendertag function to deal with CSP default requirements, instead of inserting inline scripts. This would allow the script to be executed.
- No warnings should be shown by CSP policies in the browser console.