hCaptcha: Implement no captcha mode (API/no js usage)
Closed, DeclinedPublic
Actions

Assigned To

None

Authored By

	Reedy
	Oct 25 2024, 4:28 PM

Project Tags

Referenced Files

None

Subscribers

Description

Enterprise docs but... https://docs.hcaptcha.com/enterprise/nojs_clients

xref: T250227: Investigate and evaluate hCaptcha to replace Wikimedia's Fancy Captcha, T289607: <Security Initiative> Improving Captcha

This isn't needed for hcaptcha trial.

later on it would be good to find a way to get trust values out of API and NoJS requests.

Related Objects

Mentioned In: T422222: Unable to submit edit in Basic mode
T405487: hCaptcha has no indication that JavaScript is required
Mentioned Here: T250227: Investigate and evaluate hCaptcha to replace Wikimedia's Fancy Captcha
T289607: <Security Initiative> Improving Captcha

Event Timeline

Reedy created this task.Oct 25 2024, 4:28 PM

Restricted Application added a subscriber: Aklapper. · View Herald TranscriptOct 25 2024, 4:28 PM

Reedy moved this task from Backlog to Feature Requests/Improvements on the ConfirmEdit (CAPTCHA extension) board.Nov 5 2024, 11:50 PM

Reedy renamed this task from Implement no captcha mode (API/no js usage) to hCaptcha: Implement no captcha mode (API/no js usage).Nov 6 2024, 11:35 PM

• acooper added a project: Bot detection and mitigation.Dec 13 2024, 2:24 PM

• acooper updated the task description. (Show Details)

• acooper updated the task description. (Show Details)Dec 13 2024, 2:28 PM

• acooper updated the task description. (Show Details)

• acooper updated the task description. (Show Details)Dec 13 2024, 2:42 PM

• acooper removed a project: Bot detection and mitigation.Dec 13 2024, 2:48 PM

• acooper updated the task description. (Show Details)

Bugreporter mentioned this in T405487: hCaptcha has no indication that JavaScript is required.Sep 24 2025, 4:12 PM

Bugreporter merged a task: T422222: Unable to submit edit in Basic mode.Apr 3 2026, 12:32 AM

Bugreporter added a subscriber: Krinkle.

At this point in time, aren’t planning on implementing support for no JS clients via the nojs site verify endpoint. No JS support, together with our IP masking proxy, would create a very easy opening for bad actors to exploit.

Dreamy_Jazz mentioned this in T422222: Unable to submit edit in Basic mode.Apr 13 2026, 1:33 PM

hCaptcha: Implement no captcha mode (API/no js usage)Closed, DeclinedPublicActions

Description

Related Objects

Event Timeline

hCaptcha: Implement no captcha mode (API/no js usage)
Closed, DeclinedPublic
Actions