From: Tom Hughes <tom@compton.nu>
Date: Sun, 31 May 2026 09:44:36 +0000 (+0100)
Subject: Allow turnstile for users#create as well as users#new
X-Git-Tag: live
X-Git-Url: https://git.openstreetmap.org/rails.git/commitdiff_plain?ds=inline

Allow turnstile for users#create as well as users#new
---

diff --git a/app/controllers/users_controller.rb b/app/controllers/users_controller.rb
index 2c55fcdff..5bb013427 100644
--- a/app/controllers/users_controller.rb
+++ b/app/controllers/users_controller.rb
@@ -20,7 +20,7 @@ class UsersController < ApplicationController
   allow_thirdparty_images :only => :show
   allow_social_login :only => :new
 
-  content_security_policy(:only => :new) do |policy|
+  content_security_policy(:only => [:new, :create]) do |policy|
     if Settings.turnstile_site_key
       policy.frame_src(*policy.frame_src, "challenges.cloudflare.com")
       policy.script_src(*policy.script_src, "challenges.cloudflare.com")