clifford-fra / googlerecaptchav2 Goto Github PK

Hi Clifford,

We successfully installed component and added it to our screen flow.
When posted to our experience cloud site everything works great, but when we move it to SquareSpaces website we get connection error " refuses to connect.

I have set an Origin Page URL to our SqureSpaces Url per documentation. And I added all our domains to the domain list when created our reCatcha keys,
We do use lightning out to place our forms on SS website.

Do you have any idea what maybe wrong here?

Hi @clifford-fra

I have been using your component for some time and it has always worked perfectly.
But from 4/5 days the component stopped working with the following message:

This page has an error. You might just need to refresh it. Error during LWC component connect phase: [Failed to initialize a component [a is undefined]] Failing descriptor: {markup://flowruntime:auraField}

Can you help me ?

Hey Clifford,

I was reviewing your implementation, and i think it has two security vulnerabilities. One of them I consider to be a major security vulnerability.

1. It stores the private key for recaptcha in javascript and passes it to Salesforce for server-side verification. This is very bad because I can easily get your private key by looking at the Network log in Chrome Dev Tools. This is a major vulnerability and that can be fixed easily by storing the private key within Salesforce and retrieving it in apex.
2. It does not enforce recaptcha verification with submission of form data. Basically it is not implemented correctly and an attacker can bypass it with ease. We had a similar attack on our systems not long ago, and we were also verifying the recaptcha in a separate callout prior to form submission. I was able to duplicate the attack in about 10 minutes, spam our case queue, and consequently send automated emails to whatever email addresses I chose, all from our company's trusted domain.

I am open to begin wrong about these two vulnerabilities, but I feel it would be irresponsible of me to not inform you. Thanks for understanding.

I am having trouble getting this to work (likely an error on my part, but not sure how to resolve). I followed directions for setup (which were pretty straight forward) and have a reCaptcha on a Flow in my Community that should create a case. I click the checkbox and submit & get an error saying to complete the captcha.
I left defaults in place, except for the Site & Secret keys. Any thoughts on how to troubleshoot?

The components installed correctly and I was able to place the Captcha box on my screen flow. However, when using the flow, after I check the box and am presented with the image challenge, I can only see half of the bottom row of images. Everything else is cut off. No matter where on the screen I place the Captcha box this issue persists. Any suggestions?

I got everything running as expected in Sandbox. When I go to install all the components in Prod, I get this error:

Deployment CompleteTest failure, method: CaseCommProcessorTest.test -- System.DmlException: Insert failed. First exception on row 0; first error: FIELD_INTEGRITY_EXCEPTION, field integrity exception (Guest users cannot be record owners.): [] stack Class.CaseCommProcessorTest.setup: line 11, column 1

Which is sort of funny because I'm using the ReCaptcha in a Flow in our Community to prevent a Guest user from owning a case.

I just downloaded this component and added our Site and Secret Key but continually get the error "Please complete the captcha". Is anyone seeing this? I also tried deleting and redownloading the component. Thanks!

Hello,
I was able to install this in my sandbox but not in production. In production, I got the below errors:

Deployment CompleteTest failure, method: ConvertLeadControllerTests.test1 -- System.AssertException: Assertion Failed: TEST #1/CHECK #2: Expected: 1, Actual: 0 stack Class.ConvertLeadControllerTests.test1: line 51, column 1

Test failure, method: ConvertLeadControllerTests.test2 -- System.AssertException: Assertion Failed: TEST #2/CHECK #2: Expected: 1, Actual: 0 stack Class.ConvertLeadControllerTests.test2: line 110, column 1

Test failure, method: ConvertLeadControllerTests.test3 -- System.AssertException: Assertion Failed: TEST #3/CHECK #2: Expected: 1, Actual: 0 stack Class.ConvertLeadControllerTests.test3: line 181, column 1

Test failure, method: ConvertLeadControllerTests.test4 -- System.AssertException: Assertion Failed: TEST #4/CHECK #2: Expected: 1, Actual: 0 stack Class.ConvertLeadControllerTests.test4: line 253, column 1

Test failure, method: ConvertLeadControllerTests.test5 -- System.AssertException: Assertion Failed: TEST #5/CHECK #3: Expected: 1, Actual: 0 stack Class.ConvertLeadControllerTests.test5: line 316, column 1

Do you know the reasons for these errors? I am not familiar with Apex, so please forgive my lack of knowledge on this.

Hello,
I was able to install this in my sandbox and it is working fine but not in production. In production, I got the below errors after login screen:

Unhandled Exception : java.lang.RuntimeException: /app/.local/share/sfdx/client/7.177.1-617a284/bin/node: /lib/x86_64-linux-gnu/libc.so.6: version `GLIBC_2.28' not found (required by /app/.local/share/sfdx/client/7.177.1-617a284/bin/node)

Please Help!

After the Winter '24 Update, this component no longer resizes on our community sites. It displays as a small, scrollable window, with the same width as the "I am not a Robot" component, but a slightly larger height. Any chance this will be updated? It was working as expected prior to the major update.