Warning: localhost detected when loading hCaptcha from Apache Cordova browser platform

[andreszs]

I've developed an hCaptcha Cordova plugin alongside a demo app for both android and browser plaforms and it works fine.

In android it loads the hcaptcha SDK 4.0.0 correctly.

However, since I failed to bundle this vanilla-hcaptcha JS plugin for the browser platform (which is fine with running on localhost), the plugin dynamically loads the regular JS from js.hcaptcha.com to render the widget. Consequently, the warning about running on localhost is triggered whenever the hCaptcha widget is shown:

Since this is the Cordova browser platform, it runs from localhost by default and there's no (straightforward) way to change this. The hCaptcha challenge works, and the token can be validated nonetheless, but it would be nice to get rid of this console error message.

PRs are welcome to add the missing iOS platform or switch the JS served from js.hcaptcha.com to a locally bundled JS file.. I've tried using the plugin.xml source-file option to bundle the vanilla-hcaptcha JS without success, probably because I'm not very good at developing advanced cordova plugins (nor is chat GPT which assisted me on this, and don't even try asking Gemini).