@prasad we need not do that, instead of deferred loading we can go for explicit loading of recaptcha. Will have to weigh in any cons of that.

@nilay.automatesmb what do you mean by "explicit loading"?

@prasad the above feels a bit "hacky". I think we should find a way for the JS not to execute.

@ruben.estrada - We remove script tag acceptance in the content here we are doing special case handling to retain. So is the workaround pattern.

couldn't we put something like 'RECAPTCHA_SCRIPT_PLACEHOLDER' and then replace the whole thing with <script src="https://www.google.com/recaptcha/api.js" async defer></script>. I find the <vscript> convention quite confusing.