CAPTCHA fixes - Githubissues

freedomofpress / securedrop.org

Code for the SecureDrop project website

https://securedrop.org

GNU Affero General Public License v3.0

40 stars 9 forks source link

CAPTCHA fixes #455

Closed harrislapiroff closed 1 year ago

harrislapiroff commented 6 years ago

[x] Remove recaptcha from the site (it is currently being blocked by our CSP and we don't wanna be pinging Google anyway)
[ ] Look into implementing django-captcha on the site. If it's trivially easy, do it this week. Otherwise let's keep a ticket open for that down the road.

harrislapiroff commented 6 years ago

I'm going to deprioritize integrating django-simple-captcha in. It seems like it should be easy enough to do, but I'm going to want to build some tests around it and I want to make sure we can have both image and audio captchas, which adds a bit more complexity. If there's time after I get the other prelaunch tasks done I'll look into it, but otherwise I want to put it off until after launch. Cool, @msheiny @conorsch?

conorsch commented 6 years ago

@harrislapiroff Sounds good. For launch, let's go with removing RECAPTCHA, making the forms CAPTCHA-less. Worst case scenario, we have some spammy submissions that will need to be cleaned up.

I see you've got a PR open for removing RECAPTCHA in #458, so that should sort us out for launch.

harrislapiroff commented 6 years ago

Resolved the first part of this ticket in #458. Moving the ticket back to the backlog to handle the second part post-launch.

harrislapiroff commented 1 year ago

[Backlog pruning 5/10] Duplicate of #452