Skip to content

Check an IP deny list while validating the captcha

Kez requested to merge donate-static-i115-credit-card-fraud into production

Context: tpo/web/donate-static#115

We're seeing an extremely high volume of fraudulent donations. By adding an IP address deny list, we can hopefully slow down or stop fraudulent transactions.

when this is merged we'll also need to add the deny list variable to the settings file used in production.

/cc @mathieu @mattlav

Edited by Kez

Merge request reports