contact-form widget doesn't inject recaptcha code about security-package HOT 8 CLOSED

With current recaptcha implementation we cannot add it to widget from Content->Pages, only from configuration for specific controllers
Mark this issue as Feature Request for further discussion

from security-package.

small preemptive clarification: on the /contact/index/index/ contact form itself, the recaptcha is working properly.

from security-package.

Hello @heldchen ,
the reCaptcha is injected via layout (see view/frontend/layout/contact_index_index.xml in the module).
So basically it will not be injected when directly using the contact form as a block. In this case I think you will need to use a custom phtml file like the following:

<div
    class="field-recaptcha"
    id="<?= /* @noEscape */ $block->getRecaptchaId() ?>-container"
    data-bind="scope:'<?= /* @noEscape */ $block->getRecaptchaId() ?>'"
>
    <!-- ko template: getTemplate() --><!-- /ko -->
</div>

<script type="text/x-magento-init">
{
    "#<?= /* @noEscape */ $block->getRecaptchaId() ?>-container": {
        "Magento_Ui/js/core/app": {
            "components":{
                "<?= /* @noEscape */ $block->getRecaptchaId() ?>":{
                    "component": "MSP_ReCaptcha\/js\/reCaptcha",
                    "zone": "create",
                    "settings": {
                        "siteKey": "<?= /* @noEscape */ $block->getPublicKey() ?>",
                        "size": "invisible",
                        "badge": "bottomright",
                        "theme": null,
                        "lang": null,
                        "enabled": {
                            "contact":true
                        }
                    },
                    "reCaptchaId":"<?= /* @noEscape */ $block->getRecaptchaId() ?>"
                }
            }
        }
    }
}
</script>

NOTE: I did not test it, so make a try before, you may need to adjust something.

from security-package.

@phoenix128 I know (and we have implemented it in a similar way), but ideally this should be injected by the recaptcha module into the contactform widget itself for everyone to use properly without having to manually reconstruct the initialization logic - after all, it currently breaks any page that has the core contact form widget in cms page and recaptcha enabled.

from security-package.

@magento export issue to Jira project MC as Story

from security-package.

✅ Jira issue https://jira.corp.magento.com/browse/MC-42379 is successfully created for this GitHub issue.

from security-package.

There were some pre-requisites to this internally. This issue is currently pending a discussion.

from security-package.

We have ultimately decided not to work on this issue internally right now due to scheduling and commitment reasons. We may decide to do this in the future but for now we will close this issue. You are welcome to open a PR to fix this issue in which case I will happily reopen this.

from security-package.