search

contributte / reCAPTCHA

:bangbang: Google reCAPTCHA (security) for Nette Framework \ Forms
https://contributte.org/packages/contributte/reCAPTCHA.html
MIT License
41 stars 28 forks source link

Vulnerable to automated attacks when error message not set #25

Closed Gappa closed 5 years ago

Gappa commented 5 years ago

Error message is not required (although mentioned in the examples), but when it is not set, the whole recaptcha can be bypassed by using curl for example.

These are the lines mentioned:

Should the functionality be dependant on setting the message? Maybe set a default message or validate it regardless?

Gappa commented 5 years ago

👍 Thanks! :)