add honeypot to snap reports (#5589)

* add honeypot to snap reports

* Add aria-hidden attribute to honeypot field for screen reader accessibility (#5590)

* Initial plan

* Add aria-hidden attribute to honeypot field for accessibility

Co-authored-by: M7mdisk <43501040+M7mdisk@users.noreply.github.com>

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: M7mdisk <43501040+M7mdisk@users.noreply.github.com>

* Apply suggestion from @Copilot

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* allow urls in comments

* fix: remove inline styling

---------

Co-authored-by: Copilot <198982749+Copilot@users.noreply.github.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

Author: 3 people

templates/store/snap-details/_report_snap_modal.html

@@ -50,6 +50,10 @@ <h5 class="p-notification__title">
 
         <label for="report-snap-email">Your email (optional)</label>
         <input id="report-snap-email" type="email" name="email" placeholder="email@example.com" />
+        <div class="u-off-screen">
+          <label for="report-snap-confirm" aria-hidden="true">I agree</label>
+          <input id="report-snap-confirm" type="checkbox" name="confirm" aria-hidden="true" />
+        </div>
         <p>In submitting this form, I confirm that I have read and agree to <a href="https://ubuntu.com/legal/data-privacy/contact">Canonical’s Privacy Notice</a> and <a href="https://ubuntu.com/legal/data-privacy">Privacy Policy</a>.</p>
         <div class="u-align--right">
           <button type="button" class="js-modal-close u-no-margin--bottom">Cancel</button>

webapp/store/snap_details_views.py

@@ -561,6 +561,10 @@ def report_snap():
 
         fields = flask.request.form
 
+        # If the honeypot is activated (hidden field populated
+        # silently reject to avoid spam
+        if "confirm" in fields:
+            return flask.jsonify({"ok": True}), 200
         payload = {
             "snap_name": fields.get("snap_name", ""),
             "reason": fields.get("reason", ""),