listmonk icon indicating copy to clipboard operation
listmonk copied to clipboard

Altcha form challenge URL is incorrect

Open tgrosinger opened this issue 3 months ago • 3 comments

Version:

  • listmonk: 5.1.0

Description of the bug and steps to reproduce:

When visiting the forms page, the form HTML for Altcha includes something like this:

<altcha-widget challengeurl="https://example.com/api/captcha/altcha"></altcha-widget>
<script type="module" src="https://example.com/public/static/altcha.umd.js" async defer></script>

I was receiving a 400 request when the webpage I embedded the form on attempted to retrieve the challengeurl. After some investigation I realized the url is missing public and should instead be https://example.com/api/public/captcha/altcha

tgrosinger avatar Sep 20 '25 22:09 tgrosinger

Thank you, your fix is working 👍

fr0gger avatar Sep 22 '25 09:09 fr0gger

All occurrences of this that I can find in the code are already correct. Maybe it was already fixed for the next release?

tgrosinger avatar Sep 22 '25 15:09 tgrosinger

Since this issue doesn't make it clear, the correct path is:

/api/public/captcha/altcha

https://github.com/knadh/listmonk/blob/2c5dc614274e8f40418541c1865c0b86104fadf9/cmd/handlers.go#L237

deevus avatar Sep 24 '25 05:09 deevus