Skip to main content
Checks for CAPTCHA protection on public forms
Rule IDsecurity/form-captcha
CategorySecurity
ScopePer-page
Severitywarning
Weight4/10

​
Solution

Add CAPTCHA protection (reCAPTCHA, Cloudflare Turnstile, hCaptcha, etc.) to public-facing forms to prevent spam and bot submissions. Contact forms, comment forms, newsletter signups, and registration forms are common targets for automated abuse. Modern CAPTCHA solutions like Turnstile offer invisible protection with minimal user friction.

​
Enable / Disable

​
Disable this rule

squirrel.toml
[rules]
disable = ["security/form-captcha"]

​
Disable all Security rules

squirrel.toml
[rules]
disable = ["security/*"]

​
Enable only this rule

squirrel.toml
[rules]
enable = ["security/form-captcha"]
disable = ["*"]