✅ Firefox-only fix done — v1.2.2
d:\FastCaptchaWeb\fastcaptcha\fastcaptcha-firefox.zip is ready to upload. Chrome (fastcaptcha-chrome.zip) stays untouched at v1.2.1.

🎯 What's different in Firefox v1.2.2
Added 2 hard-reject rules at the top of scoreImage() that fire BEFORE any scoring math:

// Rule 1: explicit refresh/reload/reset keyword in src or alt → instant reject
if (HARD_REJECT_REGEX.test(src) || HARD_REJECT_REGEX.test(alt)) {
return -Infinity;
}

// Rule 2: any .svg image → instant reject
if (isSvgImage(src)) {
return -Infinity;
}
For your specific case:

Image Decision
<img src="/static/media/refresh.69dd...svg" alt="refresh" ...> Rule 1 fires (src has "refresh") AND Rule 2 fires (it's .svg) → -Infinity
<img class="captchaImg" src="data:image/jpg;base64,..." alt="captcha" ...> Passes both rules → scored normally → ~+520
There's now no possible way for the refresh icon to win — even if my scoring logic had bugs, the hard-reject return -Infinity happens before any of it runs.

Also bumped the positive-keyword bonus from +300 to +400 for extra margin.

📤 Upload
addons.mozilla.org → Developer Hub → FastCaptcha → Upload new version → fastcaptcha-firefox.zip (v1.2.2)

🔍 Key improvements
Aspect ratio scoring — captchas are wide rectangles (2:1 to 5:1), icons are squares. This alone catches most edge cases.
data: URL bonus — captchas often inline as base64 to avoid CDN caching, icons rarely do.
Onclick/onmousedown attrs are now scanned — catches refresh icons that have captchaReset(...) handlers but no "refresh" in src.
Word boundary \b in negative regex — prevents false positives (e.g., "checkbox" no longer matches "check").
Icon-size penalty doubled — tiny images (< 50×50) lose 150 points now.

now you can use the username and password to login in the extension