Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Newline and whitespace characters pass honeypot field checks #47

Open
anthonymfowler15 opened this issue Apr 23, 2021 · 0 comments
Open

Comments

@anthonymfowler15
Copy link

We have forms being submitted with "\n" values in our honeypot fields (which are just the default a_comment_body). These are not properly being caught in the protect_from_spam method. It looks like this is because "\n".blank? returns true: https://github.com/curtis/honeypot-captcha/blob/master/lib/honeypot-captcha.rb#L18.

Can we get a modification to that function to check for parameter length as well?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant