produck / svg-captcha

generate svg captcha in node
MIT License
1.86k stars 174 forks source link

Single path to improve security #51

Open Xiut opened 4 years ago

Xiut commented 4 years ago

Do you want to request a feature or report a bug? feature

If this is a feature request, what is motivation for changing the behavior? Improve security

If it is a bug, which version of svg-captcha are you using?

What is the current behavior? Currently, one path is used for one character of the code in the SVG graphic.

What is the expected behavior? The paths should be combined into one path so that an attacker cannot easily separate the individual characters from the noise and background, which makes it much easier to automatically resolve the captcha.

Step to reproduce the bug or other relevant information

bogushevich commented 4 years ago

Noise lines, background color, char color just interfere user, but not improve security.