formie.js blocked by cookiebot

joepagan commented 1 week ago

Describe the bug

Hey, sort of a bug...

Where users opt out of non-essential cookies using the service cookiebot with auto-blocking mode formie.js is blocked and has been manipulated to use the plain/text type attribute. I believe this is because cookiebot categorises a recaptcha cookie as "marketing".

Where this same user submits a form, it appears as if there is no issue.

Appreciate you can't necessarily do much about this, however, I feel like there should be some way to at least alert the users where maybe the formie.js file has failed to load. Or potentially allude to this scenario unfolding in your docs.

Steps to reproduce

submit a form when opting out of cookies
no submission saved in the backend

Form settings

Multi-page form: Yes or No
Submission Method: Ajax or Page Reload
Client-side Validation: Yes or No
Custom Form Templates: Yes or No

Craft CMS version

3

Plugin version

1.4

Multi-site?

No response

Additional context

No response

engram-design commented 1 week ago

Just for clarity, we're talking about cookiebot right?

That is indeed a bit problematic with it blocking loading. It feels heavy-handed to disable the form entirely if JS fails, but then it's not exactly going to work correctly if it is.

I'll give this some thought on the best approach, as well as testing with various captchas.

joepagan commented 1 week ago

Thanks for getting back.

Yes, that cookiebot! Sorry should have clarified.

There is some slightly related discussions about recaptcha with the upcoming third party cookie apolocalypse: https://github.com/google/recaptcha/issues/155

And a google engineer chiming in saying it will still work without those cookies, whether the problematic one is third party or not I am not sure currently, so clearly eventually the cookies aren't even required for the service to be usable. https://github.com/privacysandbox/privacy-sandbox-dev-support/issues/228#issuecomment-1885828939

verbb / formie