Update CSP for Full reCAPTCHA Support

Author: aaronskiba

nginx.conf

@@ -17,11 +17,12 @@ http {
     add_header Referrer-Policy "strict-origin-when-cross-origin" always;
     add_header Content-Security-Policy "
         default-src 'self'; 
-        script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com; 
+        script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://www.recaptcha.net https://www.gstatic.com; 
         style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; 
         font-src 'self' https://fonts.gstatic.com; 
-        connect-src 'self' https://www.google-analytics.com;
-        img-src 'self' https://orcid.org https://info.orcid.org;" always;
+        connect-src 'self' https://www.google-analytics.com https://www.recaptcha.net https://www.gstatic.com; 
+        img-src 'self' https://orcid.org https://info.orcid.org https://www.gstatic.com https://www.google.com/recaptcha/; 
+        frame-src 'self' https://www.google.com/recaptcha/ https://www.recaptcha.net/recaptcha/ https://recaptcha.google.com;" always;
 
     # Basic nginx optimizations
     sendfile on;