QUALITY PATCH

MDVA-39305-V2: A form can be submitted before Google ReCAPTCHA fully loads

A form can be submitted before Google ReCAPTCHA fully loads. Quality patch MDVA-39305-V2 for magento/module-re-captcha-contact applies to Magento Open Source and Adobe Commerce 2.4.1-p1 to 2.4.6-p15.

Categories
Customer, Other
Components
magento/module-re-captcha-contact, magento/module-re-captcha-customer, magento/module-re-captcha-frontend-ui, magento/module-re-captcha-newsletter, magento/module-re-captcha-review, magento/module-re-captcha-send-friend, magento/module-re-captcha-ui, magento/module-contact, magento/module-customer, magento/module-newsletter, magento/module-review, magento/module-send-friend, magento/framework, magento/module-customer-custom-attributes, magento/module-invitation
Origin
adobe-commerce-support

No Adobe documentation page exists for this patch.

Install

Install the Quality Patches Tool with composer require magento/quality-patches, apply the prerequisites listed for all files applicable to your distribution and version first, then run vendor/bin/magento-patches apply MDVA-39305-V2. On Cloud, add MDVA-39305-V2 under stage.build.QUALITY_PATCHES in .magento.env.yaml.

For cweagans/composer-patches, choose a compatible version below and download the bundle. Copy its MDVA-39305-V2/ folder into patches/composer/, merge composer.patches.json into composer.json, then run composer install. Bundle prerequisites the same way and list them first. Paths are relative to each package root, using the default -p1 level. Prefer local files when configuring composer-patches; a remote URL can change.

Patch files and compatible versions

Packages across compatible versions (13): magento/module-re-captcha-customer, magento/module-re-captcha-frontend-ui, magento/module-re-captcha-contact, magento/module-re-captcha-newsletter, magento/module-re-captcha-review, magento/module-re-captcha-send-friend, magento/module-re-captcha-ui, magento/module-customer, magento/module-contact, magento/module-newsletter, magento/module-review, magento/module-send-friend, magento/framework
Packages across compatible versions (15): magento/module-re-captcha-customer, magento/module-re-captcha-frontend-ui, magento/module-re-captcha-contact, magento/module-re-captcha-newsletter, magento/module-re-captcha-review, magento/module-re-captcha-send-friend, magento/module-re-captcha-ui, magento/module-customer, magento/module-contact, magento/module-newsletter, magento/module-review, magento/module-send-friend, magento/framework, magento/module-customer-custom-attributes, magento/module-invitation

magento/security-package >=1.1.1 <1.1.2 deprecated

Magento Open Source
2.4.2-p2, 2.4.2-p1, 2.4.2, 2.4.1-p1
Adobe Commerce
2.4.2-p2, 2.4.2-p1, 2.4.2, 2.4.1-p1
Patch file
patches/os/ACSD-45755_1.1.1.patch
  • vendor/magento/module-re-captcha-contact/Plugin/Customer/DisableEditAccountButton.php (added)
  • vendor/magento/module-re-captcha-contact/Plugin/DisableContactUsButton.php (added)
  • vendor/magento/module-re-captcha-contact/composer.json
  • vendor/magento/module-re-captcha-contact/etc/frontend/di.xml (added)
  • vendor/magento/module-re-captcha-customer/Plugin/Customer/DisableCreateAccountButton.php (added)
  • vendor/magento/module-re-captcha-customer/Plugin/Customer/DisableEditAccountButton.php (added)
  • vendor/magento/module-re-captcha-customer/Plugin/Customer/DisableLoginButton.php (added)
  • vendor/magento/module-re-captcha-customer/etc/frontend/di.xml
  • vendor/magento/module-re-captcha-frontend-ui/view/frontend/web/js/reCaptcha.js
  • vendor/magento/module-re-captcha-newsletter/Plugin/DisableNewsletterButton.php (added)
  • vendor/magento/module-re-captcha-newsletter/composer.json
  • vendor/magento/module-re-captcha-newsletter/etc/frontend/di.xml (added)
  • vendor/magento/module-re-captcha-review/Plugin/DisableReviewButton.php (added)
  • vendor/magento/module-re-captcha-review/composer.json
  • vendor/magento/module-re-captcha-review/etc/frontend/di.xml (added)
  • vendor/magento/module-re-captcha-send-friend/Plugin/DisableSendFriendButton.php (added)
  • vendor/magento/module-re-captcha-send-friend/composer.json
  • vendor/magento/module-re-captcha-send-friend/etc/frontend/di.xml (added)

magento/security-package >=1.1.2 <1.1.3 deprecated

Magento Open Source
2.4.3-p3, 2.4.3-p2, 2.4.3-p1, 2.4.3
Adobe Commerce
2.4.3-p3, 2.4.3-p2, 2.4.3-p1, 2.4.3
Patch file
patches/os/ACSD-45755_1.1.2.patch
  • vendor/magento/module-re-captcha-customer/Plugin/Customer/DisableCreateAccountButton.php (added)
  • vendor/magento/module-re-captcha-customer/Plugin/Customer/DisableLoginButton.php (added)
  • vendor/magento/module-re-captcha-customer/etc/frontend/di.xml
  • vendor/magento/module-re-captcha-frontend-ui/view/frontend/web/js/reCaptcha.js

magento/security-package >=1.1.3-p1 <1.1.4

Magento Open Source
2.4.4-p18, 2.4.4-p17, 2.4.4-p16, 2.4.4-p15, 2.4.4-p14, 2.4.4-p13, 2.4.4-p12, 2.4.4-p11, 2.4.4-p10, 2.4.4-p9, 2.4.4-p8, 2.4.4-p7, 2.4.4-p6, 2.4.4-p5, 2.4.4-p4, 2.4.4-p3, 2.4.4-p2, 2.4.4-p1
Adobe Commerce
2.4.4-p18, 2.4.4-p17, 2.4.4-p16, 2.4.4-p15, 2.4.4-p14, 2.4.4-p13, 2.4.4-p12, 2.4.4-p11, 2.4.4-p10, 2.4.4-p9, 2.4.4-p8, 2.4.4-p7, 2.4.4-p6, 2.4.4-p5, 2.4.4-p4, 2.4.4-p3, 2.4.4-p2, 2.4.4-p1
Replaced with
MDVA-39305-V3
Patch file
patches/os/ACSD-50969_1.1.3.patch
  • vendor/magento/module-re-captcha-customer/Plugin/Customer/DisableCreateAccountButton.php (added)
  • vendor/magento/module-re-captcha-customer/Plugin/Customer/DisableLoginButton.php (added)
  • vendor/magento/module-re-captcha-customer/etc/frontend/di.xml
  • vendor/magento/module-re-captcha-frontend-ui/view/frontend/web/js/reCaptcha.js

magento/security-package >=1.1.4 <1.1.6

Magento Open Source
2.4.6-p15, 2.4.6-p14, 2.4.6-p13, 2.4.6-p12, 2.4.6-p11, 2.4.6-p10, 2.4.6-p9, 2.4.6-p8, 2.4.6-p7, 2.4.6-p6, 2.4.6-p5, 2.4.6-p4, 2.4.6-p3, 2.4.6-p2, 2.4.6-p1, 2.4.6, 2.4.5-p17, 2.4.5-p16, 2.4.5-p15, 2.4.5-p14, 2.4.5-p13, 2.4.5-p12, 2.4.5-p11, 2.4.5-p10, 2.4.5-p9, 2.4.5-p8, 2.4.5-p7, 2.4.5-p6, 2.4.5-p5, 2.4.5-p4, 2.4.5-p3, 2.4.5-p2, 2.4.5-p1, 2.4.5
Adobe Commerce
2.4.6-p15, 2.4.6-p14, 2.4.6-p13, 2.4.6-p12, 2.4.6-p11, 2.4.6-p10, 2.4.6-p9, 2.4.6-p8, 2.4.6-p7, 2.4.6-p6, 2.4.6-p5, 2.4.6-p4, 2.4.6-p3, 2.4.6-p2, 2.4.6-p1, 2.4.6, 2.4.5-p17, 2.4.5-p16, 2.4.5-p15, 2.4.5-p14, 2.4.5-p13, 2.4.5-p12, 2.4.5-p11, 2.4.5-p10, 2.4.5-p9, 2.4.5-p8, 2.4.5-p7, 2.4.5-p6, 2.4.5-p5, 2.4.5-p4, 2.4.5-p3, 2.4.5-p2, 2.4.5-p1, 2.4.5
Replaced with
MDVA-39305-V3
Patch file
patches/os/ACSD-52419_1.1.4-p2.patch
  • vendor/magento/module-re-captcha-contact/etc/frontend/di.xml (added)
  • vendor/magento/module-re-captcha-customer/Plugin/Customer/DisableCreateAccountButton.php (deleted)
  • vendor/magento/module-re-captcha-customer/Plugin/Customer/DisableForgotPasswordButton.php (deleted)
  • vendor/magento/module-re-captcha-customer/Plugin/Customer/DisableLoginButton.php (deleted)
  • vendor/magento/module-re-captcha-customer/etc/frontend/di.xml
  • vendor/magento/module-re-captcha-frontend-ui/view/frontend/web/js/reCaptcha.js
  • vendor/magento/module-re-captcha-newsletter/etc/frontend/di.xml (added)
  • vendor/magento/module-re-captcha-review/etc/frontend/di.xml (added)
  • vendor/magento/module-re-captcha-send-friend/etc/frontend/di.xml (added)
  • vendor/magento/module-re-captcha-ui/Model/ButtonLock.php (added)

magento/magento2-base >=2.4.2 <2.4.3 deprecated

Magento Open Source
2.4.2-p2, 2.4.2-p1, 2.4.2
Adobe Commerce
2.4.2-p2, 2.4.2-p1, 2.4.2
Patch file
patches/os/ACSD-45755_2.4.2-p2.patch
  • vendor/magento/module-contact/Block/ContactForm.php
  • vendor/magento/module-contact/ViewModel/ContactUsButton.php (added)
  • vendor/magento/module-contact/etc/frontend/di.xml
  • vendor/magento/module-contact/view/frontend/layout/contact_index_index.xml
  • vendor/magento/module-contact/view/frontend/templates/form.phtml
  • vendor/magento/module-customer/ViewModel/CreateAccountButton.php (added)
  • vendor/magento/module-customer/ViewModel/EditAccountButton.php (added)
  • vendor/magento/module-customer/ViewModel/LoginButton.php (added)
  • vendor/magento/module-customer/view/frontend/layout/customer_account_create.xml
  • vendor/magento/module-customer/view/frontend/layout/customer_account_edit.xml
  • vendor/magento/module-customer/view/frontend/layout/customer_account_login.xml
  • vendor/magento/module-customer/view/frontend/templates/form/edit.phtml
  • vendor/magento/module-customer/view/frontend/templates/form/login.phtml
  • vendor/magento/module-customer/view/frontend/templates/form/register.phtml
  • vendor/magento/module-newsletter/ViewModel/NewsletterButton.php (added)
  • vendor/magento/module-newsletter/view/frontend/layout/default.xml
  • vendor/magento/module-newsletter/view/frontend/templates/subscribe.phtml
  • vendor/magento/module-review/ViewModel/ReviewButton.php (added)
  • vendor/magento/module-review/view/frontend/layout/catalog_product_view.xml
  • vendor/magento/module-review/view/frontend/layout/checkout_cart_configure.xml
  • vendor/magento/module-review/view/frontend/layout/wishlist_index_configure.xml
  • vendor/magento/module-review/view/frontend/templates/form.phtml
  • vendor/magento/module-send-friend/ViewModel/SendFriendButton.php (added)
  • vendor/magento/module-send-friend/view/frontend/layout/sendfriend_product_send.xml
  • vendor/magento/module-send-friend/view/frontend/templates/send.phtml

magento/magento2-base >=2.4.3 <2.4.4 deprecated

Magento Open Source
2.4.3-p3, 2.4.3-p2, 2.4.3-p1, 2.4.3
Adobe Commerce
2.4.3-p3, 2.4.3-p2, 2.4.3-p1, 2.4.3
Patch file
patches/os/ACSD-45755_2.4.3-p2.patch
  • vendor/magento/module-customer/ViewModel/CreateAccountButton.php (added)
  • vendor/magento/module-customer/ViewModel/LoginButton.php (added)
  • vendor/magento/module-customer/view/frontend/layout/customer_account_create.xml
  • vendor/magento/module-customer/view/frontend/layout/customer_account_login.xml
  • vendor/magento/module-customer/view/frontend/templates/form/login.phtml
  • vendor/magento/module-customer/view/frontend/templates/form/register.phtml

magento/magento2-base >=2.4.4-p1 <2.4.5

Magento Open Source
2.4.4-p18, 2.4.4-p17, 2.4.4-p16, 2.4.4-p15, 2.4.4-p14, 2.4.4-p13, 2.4.4-p12, 2.4.4-p11, 2.4.4-p10, 2.4.4-p9, 2.4.4-p8, 2.4.4-p7, 2.4.4-p6, 2.4.4-p5, 2.4.4-p4, 2.4.4-p3, 2.4.4-p2, 2.4.4-p1
Adobe Commerce
2.4.4-p18, 2.4.4-p17, 2.4.4-p16, 2.4.4-p15, 2.4.4-p14, 2.4.4-p13, 2.4.4-p12, 2.4.4-p11, 2.4.4-p10, 2.4.4-p9, 2.4.4-p8, 2.4.4-p7, 2.4.4-p6, 2.4.4-p5, 2.4.4-p4, 2.4.4-p3, 2.4.4-p2, 2.4.4-p1
Replaced with
MDVA-39305-V3
Patch file
patches/os/ACSD-50969_2.4.4.patch
  • vendor/magento/module-customer/ViewModel/CreateAccountButton.php (added)
  • vendor/magento/module-customer/ViewModel/LoginButton.php (added)
  • vendor/magento/module-customer/view/frontend/layout/customer_account_create.xml
  • vendor/magento/module-customer/view/frontend/layout/customer_account_login.xml
  • vendor/magento/module-customer/view/frontend/templates/form/login.phtml
  • vendor/magento/module-customer/view/frontend/templates/form/register.phtml

magento/magento2-base >=2.4.5 <2.4.7

Magento Open Source
2.4.6-p15, 2.4.6-p14, 2.4.6-p13, 2.4.6-p12, 2.4.6-p11, 2.4.6-p10, 2.4.6-p9, 2.4.6-p8, 2.4.6-p7, 2.4.6-p6, 2.4.6-p5, 2.4.6-p4, 2.4.6-p3, 2.4.6-p2, 2.4.6-p1, 2.4.6, 2.4.5-p17, 2.4.5-p16, 2.4.5-p15, 2.4.5-p14, 2.4.5-p13, 2.4.5-p12, 2.4.5-p11, 2.4.5-p10, 2.4.5-p9, 2.4.5-p8, 2.4.5-p7, 2.4.5-p6, 2.4.5-p5, 2.4.5-p4, 2.4.5-p3, 2.4.5-p2, 2.4.5-p1, 2.4.5
Adobe Commerce
2.4.6-p15, 2.4.6-p14, 2.4.6-p13, 2.4.6-p12, 2.4.6-p11, 2.4.6-p10, 2.4.6-p9, 2.4.6-p8, 2.4.6-p7, 2.4.6-p6, 2.4.6-p5, 2.4.6-p4, 2.4.6-p3, 2.4.6-p2, 2.4.6-p1, 2.4.6, 2.4.5-p17, 2.4.5-p16, 2.4.5-p15, 2.4.5-p14, 2.4.5-p13, 2.4.5-p12, 2.4.5-p11, 2.4.5-p10, 2.4.5-p9, 2.4.5-p8, 2.4.5-p7, 2.4.5-p6, 2.4.5-p5, 2.4.5-p4, 2.4.5-p3, 2.4.5-p2, 2.4.5-p1, 2.4.5
Replaced with
MDVA-39305-V3
Patch file
patches/os/ACSD-52419_2.4.5-p2.patch
  • vendor/magento/module-contact/view/frontend/layout/contact_index_index.xml
  • vendor/magento/module-contact/view/frontend/templates/form.phtml
  • vendor/magento/module-customer/ViewModel/CreateAccountButton.php (deleted)
  • vendor/magento/module-customer/ViewModel/ForgotPasswordButton.php (deleted)
  • vendor/magento/module-customer/ViewModel/LoginButton.php (deleted)
  • vendor/magento/module-customer/view/frontend/layout/customer_account_create.xml
  • vendor/magento/module-customer/view/frontend/layout/customer_account_edit.xml
  • vendor/magento/module-customer/view/frontend/layout/customer_account_forgotpassword.xml
  • vendor/magento/module-customer/view/frontend/layout/customer_account_login.xml
  • vendor/magento/module-customer/view/frontend/templates/form/edit.phtml
  • vendor/magento/module-customer/view/frontend/templates/form/forgotpassword.phtml
  • vendor/magento/module-customer/view/frontend/templates/form/login.phtml
  • vendor/magento/module-customer/view/frontend/templates/form/register.phtml
  • vendor/magento/module-newsletter/view/frontend/layout/default.xml
  • vendor/magento/module-newsletter/view/frontend/templates/subscribe.phtml
  • vendor/magento/module-review/view/frontend/layout/catalog_product_view.xml
  • vendor/magento/module-review/view/frontend/layout/checkout_cart_configure.xml
  • vendor/magento/module-review/view/frontend/layout/wishlist_index_configure.xml
  • vendor/magento/module-review/view/frontend/templates/form.phtml
  • vendor/magento/module-send-friend/view/frontend/layout/sendfriend_product_send.xml
  • vendor/magento/module-send-friend/view/frontend/templates/send.phtml
  • vendor/magento/framework/View/Element/ButtonLockInterface.php (added)
  • vendor/magento/framework/View/Element/ButtonLockManager.php (added)

magento/magento2-ee-base >=2.4.2 <2.4.3 deprecated

Magento Open Source
—
Adobe Commerce
2.4.2-p2, 2.4.2-p1, 2.4.2
Patch file
patches/commerce/ACSD-45755_2.4.2-p2.patch
  • vendor/magento/module-customer-custom-attributes/view/frontend/layout/customer_account_edit.xml
  • vendor/magento/module-customer-custom-attributes/view/frontend/templates/customer/form/edit.phtml
  • vendor/magento/module-customer-custom-attributes/view/frontend/templates/customer/form/register.phtml

magento/magento2-ee-base >=2.4.3 <2.4.4 deprecated

Magento Open Source
—
Adobe Commerce
2.4.3-p3, 2.4.3-p2, 2.4.3-p1, 2.4.3
Patch file
patches/commerce/ACSD-45755_2.4.3-p2.patch
  • vendor/magento/module-customer-custom-attributes/view/frontend/templates/customer/form/register.phtml

magento/magento2-ee-base >=2.4.4-p1 <2.4.5

Magento Open Source
—
Adobe Commerce
2.4.4-p18, 2.4.4-p17, 2.4.4-p16, 2.4.4-p15, 2.4.4-p14, 2.4.4-p13, 2.4.4-p12, 2.4.4-p11, 2.4.4-p10, 2.4.4-p9, 2.4.4-p8, 2.4.4-p7, 2.4.4-p6, 2.4.4-p5, 2.4.4-p4, 2.4.4-p3, 2.4.4-p2, 2.4.4-p1
Replaced with
MDVA-39305-V3
Patch file
patches/commerce/ACSD-50969_2.4.4.patch
  • vendor/magento/module-customer-custom-attributes/view/frontend/templates/customer/form/register.phtml

magento/magento2-ee-base >=2.4.5 <2.4.7

Magento Open Source
—
Adobe Commerce
2.4.6-p15, 2.4.6-p14, 2.4.6-p13, 2.4.6-p12, 2.4.6-p11, 2.4.6-p10, 2.4.6-p9, 2.4.6-p8, 2.4.6-p7, 2.4.6-p6, 2.4.6-p5, 2.4.6-p4, 2.4.6-p3, 2.4.6-p2, 2.4.6-p1, 2.4.6, 2.4.5-p17, 2.4.5-p16, 2.4.5-p15, 2.4.5-p14, 2.4.5-p13, 2.4.5-p12, 2.4.5-p11, 2.4.5-p10, 2.4.5-p9, 2.4.5-p8, 2.4.5-p7, 2.4.5-p6, 2.4.5-p5, 2.4.5-p4, 2.4.5-p3, 2.4.5-p2, 2.4.5-p1, 2.4.5
Replaced with
MDVA-39305-V3
Patch file
patches/commerce/ACSD-52419_2.4.5-p2.patch
  • vendor/magento/module-customer-custom-attributes/view/frontend/layout/customer_account_edit.xml
  • vendor/magento/module-customer-custom-attributes/view/frontend/templates/customer/form/edit.phtml
  • vendor/magento/module-customer-custom-attributes/view/frontend/templates/customer/form/register.phtml
  • vendor/magento/module-invitation/view/frontend/layout/magento_invitation_customer_account_create.xml

Sources

Łukasz Bajsarowicz
Built by

Łukasz Bajsarowicz, e-commerce architect

Magento and Adobe Commerce architecture, upgrades, performance and audits for merchants and agencies since 2015; magento.watch is the tooling I use on those projects.

Open source, maintained on weekends.

Work with me Sponsor on GitHub