UPSTREAM FIX

magento2-39154: Disabled storefront captcha still loads captcha js files

Community fix magento2-39154 merged into magento/magento2 on 2025-04-29, released in 2.4.9; applies cleanly to 6 releases from 2.4.8 to 2.4.8-p5.

Fixes the issue where disabled storefront captcha still loads captcha js files edited

Pull request title
Disable captcha storefont config still load captcha js files
Pull request
magento/magento2#39154
Issues
#32987 human
Author
@rogerdz
Merged
2025-04-29
Fixed in
2.4.9
Reported on
—
Categories
—
Components
magento/module-captcha, magento/module-customer

Labels

Area
Other Developer Tools
Component
Captcha, Frontend
Priority
P2
Severity
—
Reported on (labels)
2.4.x

Issue

Title and steps come from the upstream issue and pull request.

The upstream issue and pull request have no structured description.

Code match per tag

Each tag was checked with git apply --check against that tag's files. A clean match means the change applies; it is not a test result. Tags that already contain the fix are marked.

LineCode match per tagTests
2.4.6
2.4.6 conflict 2.4.6-p1 conflict 2.4.6-p2 conflict 2.4.6-p3 conflict 2.4.6-p4 conflict 2.4.6-p5 conflict 2.4.6-p6 conflict 2.4.6-p7 conflict 2.4.6-p8 conflict 2.4.6-p9 conflict 2.4.6-p10 conflict 2.4.6-p11 conflict 2.4.6-p12 conflict 2.4.6-p13 conflict 2.4.6-p14 conflict 2.4.6-p15 conflict
2.4.6: no test data 2.4.6-p1: no test data 2.4.6-p2: no test data 2.4.6-p3: no test data 2.4.6-p4: no test data 2.4.6-p5: no test data 2.4.6-p6: no test data 2.4.6-p7: no test data 2.4.6-p8: no test data 2.4.6-p9: no test data 2.4.6-p10: no test data 2.4.6-p11: no test data 2.4.6-p12: no test data 2.4.6-p13: no test data 2.4.6-p14: no test data 2.4.6-p15: no test data
2.4.7
2.4.7 conflict 2.4.7-p1 conflict 2.4.7-p2 conflict 2.4.7-p3 conflict 2.4.7-p4 conflict 2.4.7-p5 conflict 2.4.7-p6 conflict 2.4.7-p7 conflict 2.4.7-p8 conflict 2.4.7-p9 conflict 2.4.7-p10 conflict
2.4.7: no test data 2.4.7-p1: no test data 2.4.7-p2: no test data 2.4.7-p3: no test data 2.4.7-p4: no test data 2.4.7-p5: no test data 2.4.7-p6: no test data 2.4.7-p7: no test data 2.4.7-p8: no test data 2.4.7-p9: no test data 2.4.7-p10: no test data
2.4.8
2.4.8 clean 2.4.8-p1 clean 2.4.8-p2 clean 2.4.8-p3 clean 2.4.8-p4 clean 2.4.8-p5 clean
2.4.8: no test data 2.4.8-p1: no test data 2.4.8-p2: no test data 2.4.8-p3: no test data 2.4.8-p4: no test data 2.4.8-p5: no test data
2.4.9
2.4.9 file-missingcontains the fix
2.4.9: no test data

Triage

Model @cf/cloudflare/clef. Probability this is a bug fix: 93.3%. Probability it is security relevant: 69.8%.

Show the model's answers and probabilities
QuestionAnswerProbabilitiesConfidence
Change kindbugfixbugfix 90.8%, refactor 5.9%, feature 2.0%, tests_only 0.5%, dependency 0.4%, docs_only 0.3%79.5%
Areafrontendfrontend 47.2%, customer 20.4%, checkout 19.8%21.0%
Reported version2.4.22.4.2 56.7%, 2.4.2-p2 6.1%, 2.4.2-p1 3.5%32.0%
Scope1.22 of 21 44.2%, 2 39.1%, 0 16.7%6.4%
Risk1.06 of 21 46.0%, 2 29.9%, 0 24.1%3.9%
Worth backporting1.04 of 21 34.8%, 2 34.4%, 0 30.8%0.1%

Download

For cweagans/composer-patches, choose a version below and download the bundle. Copy its magento2-39154/ folder into patches/composer/, merge composer.patches.json into composer.json, then run composer install. Test files are always removed; paths are relative to each package root, using the default -p1 level.

Packages (2): magento/module-captcha, magento/module-customer
Bundle README (what the ZIP ships)
# magento2-39154

Community fix merged upstream into magento/magento2, adapted by magento.watch.
This is not a patch published by Adobe.

Pull request: https://github.com/magento/magento2/pull/39154
Issue: https://github.com/magento/magento2/issues/32987
Author: @rogerdz
Source commit: 560b3be4cf9dc45906c7bddd4f303430f0185372
Modifications: test files and documentation removed, paths rewritten relative to each Composer package.
Licence: OSL-3.0 / AFL-3.0, as the original Magento Open Source code.
Maintainer: Łukasz Bajsarowicz (@lbajsarowicz)

Licence: Magento Open Source code under OSL-3.0 and AFL-3.0. The bundle carries the original author, source commit and the list of modifications.

Sources

Łukasz Bajsarowicz
Built by

Łukasz Bajsarowicz, e-commerce architect

Magento and Adobe Commerce architecture, upgrades, performance and audits for merchants and agencies since 2015; magento.watch is the tooling I use on those projects.

Open source, maintained on weekends.