Vulnerable to automated attacks when error message not set

[Gappa]

Error message is not required (although mentioned in the examples), but when it is not set, the whole recaptcha can be bypassed by using curl for example.

These are the lines mentioned:

• https://github.com/contributte/reCAPTCHA/blob/master/src/Forms/ReCaptchaField.php#L45-L47
• https://github.com/contributte/reCAPTCHA/blob/master/src/Forms/InvisibleReCaptchaField.php#L46-L48

Should the functionality be dependant on setting the message?
Maybe set a default message or validate it regardless?

[Gappa]

👍 Thanks! :)