Friendly Captcha

Friendly Captcha recommends IP-based gating when production end-to-end tests come from known addresses.

Production websites

  1. Turn off the FormTester 365 proxy for the website.
  2. In your backend or security infrastructure, allow the FormTester 365 addresses to skip Friendly Captcha verification.
  3. Limit the exception to the form page and submission endpoint.
  4. Keep the normal siteverify request for every other source address.
  5. If the form button remains disabled until the widget completes, conditionally allow submission only for the trusted test path.

Do not expose a reusable bypass password in page source, JavaScript, or a public URL.

Staging or test environments

Friendly Captcha recommends mocking a successful siteverify response in test mode. Keep that mock isolated from production configuration.

See Friendly Captcha's automated-testing guide.

After configuring the exception, run a FormTester 365 manual test and confirm Friendly Captcha still protects a normal browser submission.

Was this helpful?