hCaptcha will not load when UV is iframed (about:blank)

[itschasa]

without about:blank cloak:

with about:blank cloak (iframe):

iframe to front end:

<iframe src="https://******" style="height:100%; width: 100%; border: none; position: fixed; top: 0; right: 0; left: 0; bottom: 0; border: none" sandbox="allow-forms allow-downloads allow-modals allow-orientation-lock allow-pointer-lock allow-popups allow-popups-to-escape-sandbox allow-presentation allow-same-origin allow-scripts allow-top-navigation allow-top-navigation-by-user-activation"></iframe>

iframe for service worker to pickup:

<iframe sandbox="allow-same-origin allow-downloads allow-scripts allow-forms allow-modals allow-orientation-lock allow-pointer-lock allow-presentation" srv="us1" src="https://******/'service'/*****"></iframe>

this probably isn't fixable, as no errors are appearing in console. most likely hcaptcha blocking when 2 iframes deep (3 iframes deep from its perspective (about:blank > uv > hcaptcha iframe))? not sure, but best to report it incase others have issues

recaptcha still works fine when about:blank-ed

[Percslol]

yeah this is a known issue, not sure how we would go about fixing it

probably going to keep this issue open though for further discussion

[allmors]

Which version are you using?

you can try https://hideip.network/

[itschasa]

Which version are you using?

you can try https://hideip.network/

Did you try it whilst about:blank cloaking was enabled?

[allmors]

Which version are you using?

you can try https://hideip.network/

Did you try it whilst about:blank cloaking was enabled?

After testing, uv cannot rewrite iframe again

[itschasa]

After testing, uv cannot rewrite iframe again

looks like UV can inject itself into an iframe whilst about:blank cloaked, but hcaptcha just refuses to load, most likely a security mesaure by hcaptcha, preventing captchas being done whilst 2 iframes deep already

[itschasa]

probably need to check if hcaptcha uses postMessage, and if it requires a trusted Message event, or correct origin?