Recaptcha: Recaptcha iframe and sandbox attribute

Created on 6 Jun 2017  路  2Comments  路  Source: google/recaptcha

We recently ran a security scan on our website and one of the things it pointed out was

An external insecure or misconfigured iframe was identified.

This happened on a page that has no iframes, but includes a recaptcha.

Their suggested solution is to add the sandbox attribute to the insecure iframe, but I don't see a way on how I would do that for the recaptcha since all you put on the page is a div with your sitekey. Additionally I have my doubts that the recaptcha would work in a sandboxed iframe.

How would I resolve this issue?

Most helpful comment

We should have sandbox settings on our iframes within a few weeks, thanks for the report.

All 2 comments

We should have sandbox settings on our iframes within a few weeks, thanks for the report.

Are there any updates regarding this issue?

Was this page helpful?
0 / 5 - 0 ratings