Issue Summary

Setting up 2fa by SMS fails with with a reCAPTCHA error

Steps to Reproduce

1. Navigate to https://id.atlassian.com/manage-profile/security/two-step-verification
2. Enter the passcode and click Configure
3. Click "Don't have a smartphone?"
4. Click "Enable using SMS"
5. Click "Text me the code" (doesn't matter if the phone number is entered or not)

Expected Results

An SMS will be sent to the mobile phone

Actual Results

No messages are sent and the following error message is shown:

We are having trouble verifying reCAPTCHA for this request. Please try again.

Checking the browser dev tool:

• In the Network tab, GET https://www.recaptcha.net/recaptcha/enterprise.js?onload=onloadcallback&render=explicit is getting "blocked"
• In the Console, the following error is returned in async-script-loader.js:179:22

Content-Security-Policy: The page’s settings blocked the loading of a resource at https://www.recaptcha.net/recaptcha/enterprise.js?onload=onloadcallback&render=explicit (“script-src”).

This is reproducible in Chrome 116.0.5845.110, Firefox 115.0.1, Safari/Chrome/Edge for iPad

Workaround

Currently there is no known workaround for this behavior. A workaround will be added here when available