All notable changes to this project will be documented in this file.
- Backend token verification module (
lib/verifyToken.js) for server-side CAPTCHA validation - Support for verifying tokens with Cloudflare Turnstile, reCAPTCHA v2, and reCAPTCHA v3 providers
- Comprehensive backend setup guide (
BACKEND-SETUP.md) with integration examples for Budibase - Security warning in README emphasizing the requirement for backend token verification
- Automatic execution support for Cloudflare Turnstile in
invisiblemode (component will callturnstile.executeon form submit) - Test harness and integration runner (
test/run-tests.js,test/integration-run.js) plus npm scripts (npm test,npm run test:integration) for automated and live-provider testing
- IMPORTANT: Documented that frontend validation is insufficient; backend verification is required to prevent form submission bypass attacks
- Show the
Actionsetting only whenProvider Nameis set toreCAPTCHA v3. - Clarified README documentation so
Actionis explicitly described as a reCAPTCHA v3-only setting.