Release

The abuse check also reads where forms send their data

A fake login page often has hardly any text: a logo, a password field and a button. Until now our abuse check only read the visible text, so such a page could slip through. It now also reads the names of the fields and the addresses the pages load or that forms and scripts send to. Images and the rest of your code still stay with us. The privacy statement and the data processing agreement say so too.

Deployed as commit 9c6eade