|
KarenC
|
April 4, 2016 at 12:15 am
I’m just wondering if anything has been discovered since this support issue
https://eventespresso.com/topic/error-a-valid-transaction-could-not-be-initiated/
I’ve updated a cloned site and tested it again with the same results. Currently we have reCaptcha turned off on our live sites.
|
|
Josh
|
April 4, 2016 at 1:34 pm
Hi Karen,
The only thing that was discovered was a few of the other sites where this same issue occurred have the http header: X-Frame-Options SAMEORIGIN.
That could only be a coincidence though, and we haven’t found evidence that the X-Frame-Options http header can cause issues with reCaptcha.
|
|
KarenC
|
April 5, 2016 at 9:52 pm
Hi Josh,
What is this X-Frame Options http header and how can I check it?
Thanks,
Karen
|
|
Josh
|
April 6, 2016 at 9:00 am
Hi Karen,
You’ll find more information about the X-Frame-Options response header and how its configured on different types of servers in this documentation:
https://developer.mozilla.org/en-US/docs/Web/HTTP/X-Frame-Options
To be clear, we haven’t found evidence that reCaptcha is affected by X-Frame-Options: SAMEORIGIN, it may be a coincidence that the two other affected sites have this same configuration.
|
