search

pypi / warehouse

The Python Package Index
https://pypi.org
Apache License 2.0
3.52k stars 945 forks source link

reCAPTCHA blocked in China #3174

Closed JacksonWuxs closed 6 years ago

JacksonWuxs commented 6 years ago

A pypi ID is necessary while Iwould like to share and upload a package on pypi. Unfortunnatly, there was something wrong with the website of "https://pypi.org/account/register/". After writing the all information, an ERROR was arise named "Recaptcha error.". I'm not sure if that is caused by China Internet?

miketheman commented 1 year ago

Here is the request jar saved from Chrome @miketheman

pypi.org.zip

Thanks, I'll investigate with these details - and think we have a path forward.

miketheman commented 1 year ago

Thanks for your details and patience!

@demonguy @Teddy-van-Jerry @SimFG I've shipped a change to the Content Security Policy we set as headers for the recaptcha - this directive helps by telling browsers what the authors of a website have decided which scripts to securely allow, and prevent unintended other scripts loading.

If you wouldn't mind deactivating the plugins that disable the CSP behavior and confirming that the recaptcha loads on registration page https://pypi.org/account/register/ so we can close this out?

demonguy commented 1 year ago

@miketheman it works now

demonguy commented 1 year ago

BTW, another url is blocked, but i think it doesn't matter

Request URL: https://media.ethicalads.io/media/client/v1.4.0/ethicalads.min.js Referrer Policy: origin-when-cross-origin Provisional headers are shown Learn more DNT: 1 Origin: https://pypi.org Referer: https://pypi.org/ sec-ch-ua: "Google Chrome";v="111", "Not(A:Brand";v="8", "Chromium";v="111" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36

miketheman commented 1 year ago

@demonguy Thanks - that's not being blocked by CSP - that might be another browser plugin like an Ad Blocker. It shouldn't have any negative impact on the operation of the site.

miketheman commented 1 year ago

Now that this is confirmed as resolved again, I'll go ahead and lock this conversation to prevent unnecessary notifications to the 20ish folks on this issue. If there are other captcha-related issues loading in China, please open a new issue (and reference this one for context).