From 1abadd04b8513ed852388a26b5b957f60076fe0e Mon Sep 17 00:00:00 2001
From: Zhengen TANG <Zhengen.TANG@halliburton.com>
Date: Fri, 7 Aug 2026 14:49:29 +0800
Subject: [PATCH] =?UTF-8?q?=E8=A1=A8=E5=8D=95=E6=96=B0=E5=A2=9E=E8=9C=9C?=
 =?UTF-8?q?=E7=BD=90=E5=8F=8D=E5=9E=83=E5=9C=BE=E5=AD=97=E6=AE=B5=EF=BC=9B?=
 =?UTF-8?q?=E4=BF=AE=E5=A4=8D=20CookieConsent=20=E7=9A=84=20react-hooks/se?=
 =?UTF-8?q?t-state-in-effect=20lint=20=E6=8A=A5=E9=94=99?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 blocks/form/LeadForm.tsx            | 13 +++++++++++++
 components/layout/CookieConsent.tsx |  2 ++
 2 files changed, 15 insertions(+)

diff --git a/blocks/form/LeadForm.tsx b/blocks/form/LeadForm.tsx
index 551630b..4653a24 100644
--- a/blocks/form/LeadForm.tsx
+++ b/blocks/form/LeadForm.tsx
@@ -8,6 +8,7 @@ const API_BASE_URL =
 
 export default function LeadForm({ value }: { value: FormBlockValue }) {
   const [values, setValues] = useState<Record<string, string>>({});
+  const [website, setWebsite] = useState(""); // 蜂蜜陷阱字段，正常用户不可见，只有机器人会填写
   const [status, setStatus] = useState<"idle" | "submitting" | "done" | "error">(
     "idle",
   );
@@ -28,6 +29,7 @@ export default function LeadForm({ value }: { value: FormBlockValue }) {
           form_id: form!.id,
           data: values,
           source_url: typeof window !== "undefined" ? window.location.href : "",
+          website,
         }),
       });
       if (!res.ok) throw new Error("submit failed");
@@ -93,6 +95,17 @@ export default function LeadForm({ value }: { value: FormBlockValue }) {
           )}
         </div>
       ))}
+      {/* 蜂蜜陷阱字段：离屏幕定位而非 display:none，避免部分机器人检测到隐藏属性后跳过；无需 tabIndex/aria-hidden 以外的额外依赖 */}
+      <input
+        type="text"
+        name="website"
+        value={website}
+        onChange={(e) => setWebsite(e.target.value)}
+        autoComplete="off"
+        tabIndex={-1}
+        aria-hidden="true"
+        className="absolute left-[-9999px] top-auto h-px w-px overflow-hidden"
+      />
       <button
         type="submit"
         disabled={status === "submitting"}
diff --git a/components/layout/CookieConsent.tsx b/components/layout/CookieConsent.tsx
index 3eaf1f2..0c4501b 100644
--- a/components/layout/CookieConsent.tsx
+++ b/components/layout/CookieConsent.tsx
@@ -10,8 +10,10 @@ export default function CookieConsent() {
 
   useEffect(() => {
     // 仅在浏览器已明确同意/拒绝前展示，避免每次访问重复弹出。
+    // localStorage 只能在客户端读取，此处属于“挂载后同步一次性客户端状态”的合理用法。
     const consent = window.localStorage.getItem(CONSENT_STORAGE_KEY);
     if (!consent) {
+      // eslint-disable-next-line react-hooks/set-state-in-effect -- 首次挂载后读取 localStorage 决定是否展示横幅，属预期用法
       setVisible(true);
     }
   }, []);