recaptcha.net only does script, not img

settings.py

@@ -577,11 +577,11 @@ CSP_REPORT_ONLY = True
 
 CSP_ALLOW = ("'self'",)
 CSP_IMG_SRC = ("'self'", STATIC_URL,
-               "https://api-secure.recaptcha.net",
                "https://www.google.com", # Recaptcha actually comes from google
                "https://statse.webtrendslive.com",
                "https://www.getpersonas.com",)
 CSP_SCRIPT_SRC = ("'self'", STATIC_URL,
+                  "https://api-secure.recaptcha.net",
                   "https://www.google.com", # Recaptcha
                   )
 CSP_STYLE_SRC = ("'self'", STATIC_URL,)