RequestPolicyContinued / requestpolicy

a web browser extension that gives you control over cross-site requests. Available for XUL/XPCOM-based browsers.
https://github.com/RequestPolicyContinued/requestpolicy/wiki
Other
252 stars 35 forks source link

reCAPTCHA is being blocked #889

Closed Zero3K closed 6 years ago

Zero3K commented 6 years ago

Read first: https://requestpolicycontinued.github.io/Contributing

Browser and Add-ons:

RequestPolicy settings: They are all at the default setting.

Steps to reproduce:

Go to https://www.coinbase.com/users

What happens?

The reCAPTCHA is missing by default.

What should happen?

It should be showing without the user having to manually allow google.com and gstatic.com for each site that uses it.

jrrdev commented 6 years ago

Hi, I guess it is normal behaviour here. If you are a user seeking for privacy, you won't allow requests to *.google.com or *.gstatic.com by default. About the reCAPTCHA thing, it is true that blocking it breaks a lot of websites. But the problem is that the URL is www.google.com/recaptcha/api.js so it doesn't offer enough control because it is the same domain as others google's spyware. Maybe the best way should be to ask google to move it to a subdomain like recaptcha.google.com :smiley:

Zero3K commented 6 years ago

I don't think they will do that.

myrdd commented 6 years ago

Yes, RPC works as intended. As regards the usability issue, https://github.com/RequestPolicyContinued/subscriptions/issues/58 covers that, which depends on https://github.com/RequestPolicyContinued/requestpolicy/issues/338. I suggest you to upvote those issues.