From ddc2b0bfe817c4c42faa72a96bc33c95e53ad462 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Javi=20Mart=C3=ADn?= Date: Wed, 11 Aug 2021 00:53:03 +0200 Subject: [PATCH] Disable invisible captcha spinner The spinner was added in version 2.0.0, so by disabling it we're keeping the behavior we've got in existing CONSUL installations. The problem with the spinner is installations need to add a secret token and share it across instances (when they've got more than one), and if they don't, invisible captcha might report false positives. I guess we could use `Rails.application.secrets.secret_key_base` as secret token, but since we haven't tested this feature at all, it's better to disable it for now. --- config/initializers/invisible_captcha.rb | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/config/initializers/invisible_captcha.rb b/config/initializers/invisible_captcha.rb index 0dd1c5a5c..b2c2ed9b5 100644 --- a/config/initializers/invisible_captcha.rb +++ b/config/initializers/invisible_captcha.rb @@ -1,6 +1,7 @@ InvisibleCaptcha.setup do |config| - config.visual_honeypots = false - config.timestamp_threshold = 4.seconds + config.visual_honeypots = false + config.spinner_enabled = false + config.timestamp_threshold = 4.seconds # Leave these unset if you want to use I18n (see below) # config.error_message = 'You are a robot!' # config.sentence_for_humans = 'If you are a human, ignore this field'