Invalid Turnstile Captcha secret still works #215

Closed
opened 2026-02-04 17:07:34 +03:00 by OVERLORD · 2 comments
Owner

Originally created by @rmartinoscar on GitHub (Dec 8, 2024).

Originally assigned to: @Boy132 on GitHub.

This is due to coderflexx/filament-turnstile & react-turnstile not enforcing cloudflare server-side-validation

Originally created by @rmartinoscar on GitHub (Dec 8, 2024). Originally assigned to: @Boy132 on GitHub. This is due to [coderflexx/filament-turnstile](<https://github.com/search?q=repo%3Acoderflexx%2Ffilament-turnstile+secret&type=code>) & [react-turnstile](<https://github.com/search?q=repo%3ALe0Developer%2Freact-turnstile%20secret&type=code>) not enforcing [cloudflare server-side-validation](https://developers.cloudflare.com/turnstile/get-started/server-side-validation/)
OVERLORD added the 🟢 easy label 2026-02-04 17:07:34 +03:00
Author
Owner

@Boy132 commented on GitHub (Dec 8, 2024):

The filament turnstile does: https://github.com/coderflexx/laravel-turnstile/blob/main/src/LaravelTurnstile.php

@Boy132 commented on GitHub (Dec 8, 2024): The filament turnstile does: https://github.com/coderflexx/laravel-turnstile/blob/main/src/LaravelTurnstile.php
Author
Owner

@rmartinoscar commented on GitHub (Jan 8, 2025):

Not needed now that we removed the old client area

@rmartinoscar commented on GitHub (Jan 8, 2025): Not needed now that we removed the old client area
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/panel#215