To protect against bot / spam attacks on P4 forms we should add as standard to all forms an invisible reCAPTCHA. It would not be visible to the P4 editor, so no additional edits or considerations are necessary for the P4 editor when building a form.

This request is based on the investigation by Angelos and a result of GP Poland experiencing a bot attack to one of their P4 forms.

SOLUTION >> reCAPTCHA v2 (Invisible reCAPTCHA badge)

The invisible reCAPTCHA badge does not require the user to click on a checkbox, instead it is invoked directly when the user clicks on an existing button on your site or can be invoked via a JavaScript API call. The integration requires a JavaScript callback when reCAPTCHA verification is complete. By default only the most suspicious traffic will be prompted to solve a captcha.

Here is an invisible reCAPTCHA v2 demo and here is documentation on how to implement it.

This should happen both in classic editor (for CPP pilot) and in the EN Form block we will migrate to Gutenberg.

TASKS

• Implement reCAPTCHA v2 in EN Form block
• Update the handbook page https://planet4.greenpeace.org/handbook/block-form/