Re: [Repo-criteria-discuss] GitLab registration requires reCAPTCHA

[Mike Gerwitz]

Hey, Sid:

It's been a while, and GitLab has been making some pretty amazing
progress since we last talked!

I have a quick question for you regarding the GNU ethical repo criteria:
who should we get in contact with (person, list, issue tracker, etc)
that can provide somewhat urgent replies to problems that arise related
to the criteria?  I'd be happy to open issues.

In this case, Thomas Levine (CC'd) recently noticed that GitLab requires
reCAPTCHA for registrations, and it doesn't quite play well with free JS
(see my comments below).  I think it'd be a pretty easy fix given
someone familiar with GitLab.  I'm not expecting an immediate fix, but
since GitLab is recommended by the GNU Project, I do want to be able to
provide some sort of acknowledgment and estimate to convey to rms.

Thanks!


On Sat, May 19, 2018 at 23:16:43 -0400, Mike Gerwitz wrote:
> On Sun, May 20, 2018 at 02:46:03 +0000, Thomas Levine wrote:
>> Mike Gerwitz writes:
>
> [...]
>
>>> Does it work with JavaScript disabled?  I find that many websites
>>> implementing reCAPTCHA do have a working non-JS fallback (I always have
>>> JS disabled, with few exceptions, and encounter many CAPTCHAS using
>>> Tor).
>>
>> It does not work with JavaScript disabled.
>
> It looks like the reCAPTCHA does have the textarea for the non-JS
> fallback when I view it without a stylesheet, but you can't get to the
> registration tab without running GitLab's (free) JS.  But in doing so,
> the fallback reCATPCHA is hidden!
>
> So I see two ways of addressing this:
>
>   1. Permit the registration pane to show with JS disabled (it has an
>      anchor now, so the `target' CSS pseudoclass could be used); and
>
>   2. Do not attempt to hide the reCAPTCHA, so that it can do its thing
>      and properly fall back.
>
> I'll get in touch with Sid Sijbrandij and see who we should contact for
> these sorts of things; discussions on the repo criteria have long since
> stalled, and some working on it don't work at GitLab anymore.

-- 
Mike Gerwitz
Free Software Hacker+Activist | GNU Maintainer & Volunteer
GPG: D6E9 B930 028A 6C38 F43B  2388 FEF6 3574 5E6F 6D05
https://mikegerwitz.com

signature.asc
Description: PGP signature