Bug Fix

Smarter spam protection on forms

What’s Fixed

Some real visitors — especially people using browser autofill on mobile or
submitting from in-app browsers like Facebook’s — were seeing “Submission
blocked for security reasons” on hosted and embedded forms, and their
submissions were lost.

Improvements

  • Suspicious submissions are no longer rejected outright. The visitor’s browser
    completes an invisible verification check (powered by the open-source ALTCHA
    proof-of-work challenge) and the form submits itself — no question to answer,
    so genuine leads aren’t lost to false positives.
  • Fast submissions are no longer penalized: people who autofill a form can
    submit after 1 second instead of 3.
  • Visitors who open a form, get distracted, and come back later can now submit
    for up to 24 hours (previously 1 hour).
  • Submissions that pass the invisible verification are flagged in the
    submission details so you can review them if needed.

Bug Fixes

  • Fixed browser autofill triggering the hidden anti-bot field and blocking
    legitimate visitors from submitting.