[Self-hosted] Cloudflare Turnstile captcha is blocked by a CSP that only allows hCaptcha

(#652) Bug Fixed self-hosting

3mo agoby RexSystem edited originally by @SchwarzeLanze on GitHub

Thread

RexSystem 1 vote 2mo ago originally by @Float-as on GitHub

Same issue for forgot password if turnstile is configured. Disabled it and I can complete forgot password flow successfully. EDIT: Hmmm same with hCaptcha

Permalink

Report a bug Request a feature

Votes: 0 votes
Status: Fixed changed 1mo ago
Fixed in: Web 2026.815.214422
Type: Bug
Tags: self-hosting
Source: fluxerapp/fluxer#1110

Moderation history 4

Rex linked #652 to the release Web 2026.815.214422
Reason: fluxerapp/fluxer#1634: fix(app-proxy): allow Cloudflare Turnstile origins in the CSP (#1634)
10h ago
Rex edited #652
- Changed: Description
Reason: Removed empty sections and checklists left over from the GitHub issue form. The text written by the author is unchanged.
1d ago
Rex edited #652
- Title changed from [Self-hosted] Unable to use Cloudlfare Turnstile as Captcha | Site key is delivered but blocked by hardcoded CSP (only hCaptcha is whitelisted) to [Self-hosted] Cloudflare Turnstile captcha is blocked by a CSP that only allows hCaptcha
Reason: Fixes the typo in the title and shortens it.
1d ago
Rex edited a comment on #652
Reason: Renumbered post references to the post numbers used on this site.
1d ago