Content Errors 7001

Products

• DX SaaS

Issue/Introduction

Full Page monitor receiving the below error found nothing on my research:
   
Content Errors https://www.ADDRESS.com/
(7001) [Report Only] Refused to frame 'https://www.google.com/' because an ancestor violates the following Content Security Policy directive: "frame-ancestors 'self'".

Resolution

The site has a couple of iframes for google's Recaptcha:

 

<iframe title="recaptcha challenge expires in two minutes" name="c-uij9m91ymdcb" frame scrolling="no" sandbox="allow-forms allow-popups allow-same-origin allow-scripts allow-top-navigation allow-modals allow-popups-to-escape-sandbox allow-storage-access-by-user-activation" src="https://www.google.com/recaptcha/api2/bframe?hl=en&amp;v=aR-zv8WjtWx4lAw-tRCA-zca&amp;k=6LcDEtQZAAAAAKnKUtWLs5MUVkAXB63DbIfQrOVu" style="width: 100%; height: 100%;"></iframe>

This seems to be OK, but the monitor intermittently fails.
There might be an error in page's javascript that caused the src attribute to point to a wrong URL that has a different CSP that disallows framing.

You can try to put Google requests on the blocklist ('Deny requests to selected URIs' monitor option ) to see if the error goes away.

 

https://developers.google.com/recaptcha/docs/faq#im-using-content-security-policy-csp-on-my-website-how-can-i-configure-it-to-work-with-recaptcha

 

The long-term resolution is to talk to Google Support or upgrade to reCaptcha v3.