hCaptcha: Implement message for no JS users
Closed, ResolvedPublic
Actions

Assigned To

Authored By

	kostajh
	Sep 25 2025, 2:02 PM

Project Tags

Referenced Files

	F66715623: Screenshot 2025-09-30 at 10.39.53 PM.png
	Oct 1 2025, 4:41 AM

Subscribers

Description

Summary

Users without skipcaptcha right, and with JS disabled, will see a Incorrect or missing CAPTCHA. error. We should inform the user that JavaScript is required.

Screenshot 2025-09-30 at 10.39.53 PM.png (1,954×686 px, 165 KB)

Technical note

Add new message key hcaptcha-noscript with the following message: JavaScript is required to continue. Turn on JavaScript in your browser settings and refresh the page.
Implement <noscript> tag in HCaptchaOutput to display the message when JavaScript is disabled

Acceptance criteria

Users without skipcaptcha who have JavaScript disabled see a more informative message
Users with skipcaptcha right can bypass CAPTCHA regardless of JavaScript state
Users without skipcaptcha but with JavaScript enabled continue to see normal output

Details

Related Changes in Gerrit:

	Subject	Author	Repo	Branch	Lines +/-
	hCaptcha: Display message for users without JS	Samuel (WMF)	mediawiki/extensions/ConfirmEdit	master	+71 -6

Customize query in gerrit

Related Objects

Mentioned In: T422231: Disable submit on no-JS or when JS is not yet loaded if HCaptcha is required for editing
Mentioned Here: T405487: hCaptcha has no indication that JavaScript is required

Event Timeline

kostajh created this task.Sep 25 2025, 2:02 PM

Restricted Application added a subscriber: Aklapper. · View Herald TranscriptSep 25 2025, 2:02 PM

kostajh added a project: Trust and Safety Product Sprint (Sprint Dadar Gulung (September 8 - September 26)).Sep 25 2025, 2:03 PM

• sguebo_WMF claimed this task.Sep 27 2025, 3:57 AM

(Probably wrong ticket, but this needs to be said)

The consequence of this is that users who use Grade C browsers (and thus don't get JS) can't create accounts at all, right? This contradicts the description at https://www.mediawiki.org/wiki/Compatibility#Grade_C - wouldn't it make more sense to fall back to FancyCaptcha for noJS browsers rather than just stonewalling them?

kostajh edited projects, added: Product Safety and Integrity (Sprint Apfel Strudel (Sep 29 - Oct 17)); removed: Trust and Safety Product Sprint (Sprint Dadar Gulung (September 8 - September 26)).Sep 29 2025, 7:57 AM

kostajh moved this task from Backlog to In progress on the Bot detection and mitigation (WE4.2 hCaptcha editing trial) board.Sep 29 2025, 8:18 AM

• sguebo_WMF changed the task status from Open to In Progress.Sep 30 2025, 1:47 AM

• sguebo_WMF updated the task description. (Show Details)

Change #1192310 had a related patch set uploaded (by Samuel (WMF); author: Samuel (WMF)):

[mediawiki/extensions/ConfirmEdit@master] [WIP] hCaptcha: Display message for users without JS

https://gerrit.wikimedia.org/r/1192310

gerritbot added a project: Patch-For-Review.Sep 30 2025, 3:10 AM

kostajh moved this task from Priority backlog to In progress on the Product Safety and Integrity (Sprint Apfel Strudel (Sep 29 - Oct 17)) board.Sep 30 2025, 11:49 AM

• sguebo_WMF updated the task description. (Show Details)Oct 1 2025, 4:11 AM

Pppery unsubscribed.Oct 1 2025, 4:25 AM

• sguebo_WMF updated the task description. (Show Details)Oct 1 2025, 4:41 AM