reForge Captcha v3.0.1 is now live. This hotfix addresses two critical user experience issues identified after the v3.0.0 enterprise-grade overhaul.

What's Fixed

1. Mouse Movement Requirement Removed
The _mm < 3 check was blocking legitimate mobile users and password managers that clicked directly without mouse movement.

Changes:

• Removed _mm counter and _mp mouse position array entirely

• Deleted _mm < 3 validation in _dv()

• Removed _speedProfile() and _entropy() (mouse-dependent)

• Fingerprint payload no longer sends mm, me, or speed data

Backend rebalanced:

• Time-on-page bonuses increased (+0.15/+0.10/+0.06)

• Scroll bonus boosted (+0.10/+0.05)

• Keyboard rhythm bonus raised (+0.07/+0.03)

• Tab focus bonus upped (+0.05)

Mobile users now score 0.65+ easily without mouse data.

2. Scroll-Lock During Modal
Body gets overflow: hidden when modal opens, restored on close. Added _lockScroll() and _unlockScroll() with _scrollLockCount for nesting support.

Touch-action: manipulation added to tiles to prevent mobile double-tap zoom.

Advanced Scroll Fixes

Root causes resolved:

1. Browser auto-scroll after verification
container.innerHTML = ... after verify triggered scroll recalculation. Fixed: _withScrollFrozen() wrapper saves/restores window.pageXOffset/pageYOffset around all DOM mutations:

• Checkbox states (ok/err/limit)

• Managed widget outcomes

• Image challenge results

2. Focus-related scrolling
All focus() calls now use {preventScroll: true}:

• Fingerprint canvas test input (line 138)

• Modal grid first tile (line 497)

• Modal close callback (line 440)

3. Modal focus restoration
Modal remembers opening element and restores focus there on close with preventScroll, preventing browser jumps.

Backend Token Generation Updated

Removed obsolete fields:

• $body['me'] (mouse entropy)

• $fp['spd_sd'] / $fp['spd_avg'] (mouse speed)

Scoring stays effective — real users pass easily, bots fail consistently.

Result

• Mobile users: No more false blocks

• Page stability: Zero unwanted scrolling

• Enterprise reliability: All fixes preserve v3.0.0 detection power

Live now: reforgecaptcha.cloud

— reForge Captcha Team