robiveli/js-captcha

Offline Vulnerability

Opened this issue · 1 comments

If someone is using this verification for an offline purpose, couldn't someone just simply use a code editor, delete the elements and scripts, and get around this (possibly even with a web console)?

No, sure that captcha validation is on client side, but it is generated in private scope and it is not doable to manipulate with it after script executes in a browser.