]> cat aescling's git repositories - mastodon.git/commit
Add honeypot fields and minimum fill-out time for sign-up form (#15276)
authorThibG <thib@sitedethib.com>
Thu, 10 Dec 2020 05:27:26 +0000 (06:27 +0100)
committerGitHub <noreply@github.com>
Thu, 10 Dec 2020 05:27:26 +0000 (06:27 +0100)
commit49eb4d4ddf61e25c5aaab89aa630ddd3c7f3c23d
tree3ed700750271b0ac8892f2282325d9838b915446
parent9669167aaeaa834dcc99fa7df961c4f9b8118850
Add honeypot fields and minimum fill-out time for sign-up form (#15276)

* Add honeypot fields to limit non-specialized spam

Add two honeypot fields: a fake website input and a fake password confirmation
one. The label/placeholder/aria-label tells not to fill them, and they are
hidden in CSS, so legitimate users should not fall into these.

This should cut down on some non-Mastodon-specific spambots.

* Require a 3 seconds delay before submitting the registration form

* Fix tests

* Move registration form time check to model validation

* Give people a chance to clear the honeypot fields

* Refactor honeypot translation strings

Co-authored-by: Claire <claire.github-309c@sitedethib.com>
13 files changed:
app/controllers/about_controller.rb
app/controllers/auth/registrations_controller.rb
app/controllers/concerns/registration_spam_concern.rb [new file with mode: 0644]
app/javascript/packs/public.js
app/javascript/styles/mastodon/forms.scss
app/models/user.rb
app/validators/registration_form_time_validator.rb [new file with mode: 0644]
app/views/about/_registration.html.haml
app/views/auth/registrations/new.html.haml
app/views/shared/_error_messages.html.haml
config/locales/en.yml
config/locales/simple_form.en.yml
spec/controllers/auth/registrations_controller_spec.rb