Skip to content

Latest commit

 

History

History
20 lines (16 loc) · 1.15 KB

File metadata and controls

20 lines (16 loc) · 1.15 KB

Changelog

All notable changes to this project will be documented in this file.

[0.3.4]

Added

  • Backend token verification module (lib/verifyToken.js) for server-side CAPTCHA validation
  • Support for verifying tokens with Cloudflare Turnstile, reCAPTCHA v2, and reCAPTCHA v3 providers
  • Comprehensive backend setup guide (BACKEND-SETUP.md) with integration examples for Budibase
  • Security warning in README emphasizing the requirement for backend token verification
  • Automatic execution support for Cloudflare Turnstile in invisible mode (component will call turnstile.execute on form submit)
  • Test harness and integration runner (test/run-tests.js, test/integration-run.js) plus npm scripts (npm test, npm run test:integration) for automated and live-provider testing

Security

  • IMPORTANT: Documented that frontend validation is insufficient; backend verification is required to prevent form submission bypass attacks

[0.3.3] - 2026-04-04

Fixed

  • Show the Action setting only when Provider Name is set to reCAPTCHA v3.
  • Clarified README documentation so Action is explicitly described as a reCAPTCHA v3-only setting.