Skip to main content
When a form POST is challenged, such as a SearXNG search, its fields are carried through the challenge. After it is solved, the browser sends the same POST again, automatically with JavaScript or with a Continue button without it. This covers same-origin application/x-www-form-urlencoded forms up to 16 KB. Cross-site POSTs, file uploads, and JSON bodies are not carried, and switching captcha provider drops the fields.