Description

hCaptcha not loading by Legion92 tackles a frustrating verification problem: an hCaptcha widget that fails to appear and repeatedly sends you to reCAPTCHA instead. Rather than a conventional game, the supplied description presents a focused troubleshooting resource for understanding why verification breaks and identifying the blocked request behind the loop.

The investigation starts with a useful clue: the standalone demo on the official hCaptcha site loads, while the affected page does not. That difference points toward a page-specific issue, though it does not conclusively rule out browser extensions. The stronger evidence appears in the browser console, where a Content Security Policy (CSP) violation identifies a blocked script request to js.hcaptcha.com.

The technical highlight is how the page’s security rules affect script loading. Its script-src directive allows certain sources but excludes the required hCaptcha host. With no separate script-src-elem directive defined, the browser falls back to script-src and blocks the request, preventing the widget from rendering. Understanding that mismatch helps pinpoint the policy configuration that needs attention.

For anyone investigating hCaptcha not loading or a recurring reCAPTCHA fallback, Legion92’s resource offers a focused look at the underlying CSP issue. Download and play to explore the troubleshooting scenario.