Compare commits

..

No commits in common. "1fb33e1bd83ac67a7b503c91bfde0852b67a896d" and "793d093c86bc2982d1a1dd43a8e34b90fa665191" have entirely different histories.

11 changed files with 38 additions and 57 deletions

View file

@ -104,6 +104,6 @@ Backup is written even if Telegram fails (`telegram_ok: false`), so you still ha
## Behaviour notes
- Honeypot field `hp_company` (legacy `website` still checked): if filled, returns `200` without notifying Telegram or writing a backup.
- Honeypot field `website`: if filled, returns `200` without notifying Telegram or writing a backup.
- In-memory rate limit: 5 POSTs per IP per 60 seconds → `429`.
- Field limits: name/contact ≤ 200 chars, message ≤ 4000.

View file

@ -114,11 +114,9 @@ def validate_fields(data: dict) -> tuple[str, str, str] | str:
return "invalid"
# Honeypot — treat as success upstream; caller checks separately.
# Accept legacy "website" (autofill magnets) and current "hp_company".
for pot in ("hp_company", "website"):
raw_pot = data.get(pot, "")
if isinstance(raw_pot, str) and raw_pot.strip():
return "honeypot"
website = data.get("website", "")
if isinstance(website, str) and website.strip():
return "honeypot"
def field(key: str, max_len: int) -> str | None:
raw = data.get(key, "")

View file

@ -428,10 +428,10 @@
<h3>Contact form</h3>
<form id="contactForm" data-status-loading="..." data-status-success="Sent ✓" data-status-error="Could not send. Please try again.">
<div class="hp-field" aria-hidden="true" style="position:absolute;left:-10000px;top:auto;width:1px;height:1px;margin:0;padding:0;overflow:hidden;clip:rect(0,0,0,0);border:0;opacity:0;pointer-events:none">
<label for="hp_company">Company fax</label>
<input id="hp_company" type="text" name="hp_company" value="" tabindex="-1" autocomplete="off">
</div>
<label class="hp-field" aria-hidden="true">
<span>Website</span>
<input type="text" name="website" tabindex="-1" autocomplete="off">
</label>
<label>
<span>Name</span>

View file

@ -277,10 +277,10 @@
<h3>Contact form</h3>
<form id="contactForm" data-status-loading="..." data-status-success="Sent ✓" data-status-error="Could not send. Please try again.">
<div class="hp-field" aria-hidden="true" style="position:absolute;left:-10000px;top:auto;width:1px;height:1px;margin:0;padding:0;overflow:hidden;clip:rect(0,0,0,0);border:0;opacity:0;pointer-events:none">
<label for="hp_company">Company fax</label>
<input id="hp_company" type="text" name="hp_company" value="" tabindex="-1" autocomplete="off">
</div>
<label class="hp-field" aria-hidden="true">
<span>Website</span>
<input type="text" name="website" tabindex="-1" autocomplete="off">
</label>
<label>
<span>Name</span>

View file

@ -428,10 +428,10 @@
<h3>Форма для связи</h3>
<form id="contactForm" data-status-loading="..." data-status-success="Отправлено ✓" data-status-error="Не удалось отправить. Попробуйте ещё раз.">
<div class="hp-field" aria-hidden="true" style="position:absolute;left:-10000px;top:auto;width:1px;height:1px;margin:0;padding:0;overflow:hidden;clip:rect(0,0,0,0);border:0;opacity:0;pointer-events:none">
<label for="hp_company">Company fax</label>
<input id="hp_company" type="text" name="hp_company" value="" tabindex="-1" autocomplete="off">
</div>
<label class="hp-field" aria-hidden="true">
<span>Website</span>
<input type="text" name="website" tabindex="-1" autocomplete="off">
</label>
<label>
<span>Имя</span>

View file

@ -333,10 +333,10 @@
<h3 data-i18n="form.title"></h3>
<form id="contactForm" data-status-loading="{{FORM_STATUS_LOADING}}" data-status-success="{{FORM_STATUS_SUCCESS}}" data-status-error="{{FORM_STATUS_ERROR}}">
<div class="hp-field" aria-hidden="true" style="position:absolute;left:-10000px;top:auto;width:1px;height:1px;margin:0;padding:0;overflow:hidden;clip:rect(0,0,0,0);border:0;opacity:0;pointer-events:none">
<label for="hp_company">Company fax</label>
<input id="hp_company" type="text" name="hp_company" value="" tabindex="-1" autocomplete="off">
</div>
<label class="hp-field" aria-hidden="true">
<span>Website</span>
<input type="text" name="website" tabindex="-1" autocomplete="off">
</label>
<label>
<span data-i18n="form.nameLabel"></span>

View file

@ -182,10 +182,10 @@
<h3 data-i18n="form.title"></h3>
<form id="contactForm" data-status-loading="{{FORM_STATUS_LOADING}}" data-status-success="{{FORM_STATUS_SUCCESS}}" data-status-error="{{FORM_STATUS_ERROR}}">
<div class="hp-field" aria-hidden="true" style="position:absolute;left:-10000px;top:auto;width:1px;height:1px;margin:0;padding:0;overflow:hidden;clip:rect(0,0,0,0);border:0;opacity:0;pointer-events:none">
<label for="hp_company">Company fax</label>
<input id="hp_company" type="text" name="hp_company" value="" tabindex="-1" autocomplete="off">
</div>
<label class="hp-field" aria-hidden="true">
<span>Website</span>
<input type="text" name="website" tabindex="-1" autocomplete="off">
</label>
<label>
<span data-i18n="form.nameLabel"></span>

View file

@ -441,25 +441,8 @@ a:hover{opacity:0.7;}
}
#contactForm label{display:block; margin-bottom:20px; font-size:13px; color:var(--text);}
#contactForm .hp-field{
position:absolute !important;
left:-10000px !important;
top:auto !important;
width:1px !important;
height:1px !important;
margin:0 !important;
padding:0 !important;
overflow:hidden !important;
clip:rect(0,0,0,0) !important;
border:0 !important;
opacity:0 !important;
pointer-events:none !important;
}
#contactForm .hp-field input{
width:1px !important;
height:1px !important;
margin:0 !important;
padding:0 !important;
border:0 !important;
position:absolute; left:-10000px; top:auto; width:1px; height:1px;
overflow:hidden; opacity:0; pointer-events:none;
}
#contactForm input, #contactForm textarea{
width:100%; margin-top:6px; padding:10px; border:1px solid var(--border);

View file

@ -277,10 +277,10 @@
<h3>Форма для связи</h3>
<form id="contactForm" data-status-loading="..." data-status-success="Отправлено ✓" data-status-error="Не удалось отправить. Попробуйте ещё раз.">
<div class="hp-field" aria-hidden="true" style="position:absolute;left:-10000px;top:auto;width:1px;height:1px;margin:0;padding:0;overflow:hidden;clip:rect(0,0,0,0);border:0;opacity:0;pointer-events:none">
<label for="hp_company">Company fax</label>
<input id="hp_company" type="text" name="hp_company" value="" tabindex="-1" autocomplete="off">
</div>
<label class="hp-field" aria-hidden="true">
<span>Website</span>
<input type="text" name="website" tabindex="-1" autocomplete="off">
</label>
<label>
<span>Имя</span>

View file

@ -428,10 +428,10 @@
<h3>Форма для зв'язку</h3>
<form id="contactForm" data-status-loading="..." data-status-success="Надіслано ✓" data-status-error="Не вдалося надіслати. Спробуйте ще раз.">
<div class="hp-field" aria-hidden="true" style="position:absolute;left:-10000px;top:auto;width:1px;height:1px;margin:0;padding:0;overflow:hidden;clip:rect(0,0,0,0);border:0;opacity:0;pointer-events:none">
<label for="hp_company">Company fax</label>
<input id="hp_company" type="text" name="hp_company" value="" tabindex="-1" autocomplete="off">
</div>
<label class="hp-field" aria-hidden="true">
<span>Website</span>
<input type="text" name="website" tabindex="-1" autocomplete="off">
</label>
<label>
<span>Ім'я</span>

View file

@ -277,10 +277,10 @@
<h3>Форма для зв'язку</h3>
<form id="contactForm" data-status-loading="..." data-status-success="Надіслано ✓" data-status-error="Не вдалося надіслати. Спробуйте ще раз.">
<div class="hp-field" aria-hidden="true" style="position:absolute;left:-10000px;top:auto;width:1px;height:1px;margin:0;padding:0;overflow:hidden;clip:rect(0,0,0,0);border:0;opacity:0;pointer-events:none">
<label for="hp_company">Company fax</label>
<input id="hp_company" type="text" name="hp_company" value="" tabindex="-1" autocomplete="off">
</div>
<label class="hp-field" aria-hidden="true">
<span>Website</span>
<input type="text" name="website" tabindex="-1" autocomplete="off">
</label>
<label>
<span>Ім'я</span>