(function () {
try {
// AQ-r2 (2026-06-09): respect the explicit-denial sentinel
// written by cookie-consent-harden.js writeATR() on any
// marketing-axis denial (payload.marketing === false; cycle-3 F1).
// Without this gate, the next page navigation re-creates
// gmx_first_touch from the current URL+referrer+utm_*+click_ids,
// silently undoing the reject-all deletion (sweep finding #1).
// The sentinel is cleared the moment the visitor grants
// marketing in the banner (analytics-only grant does NOT
// clear), restoring the writer path on the very next
// page load. Page-cache-safe: the sentinel is a
// browser-resident cookie checked in the inline script, so
// varnish/breeze-served HTML still hits this gate.
if (/(?:^|;\s*)gmx_consent_denied=1(?:;|$)/.test(document.cookie || '')) return;
var CLICK_IDS = ['gclid','fbclid','msclkid','ttclid','wbraid','gbraid','li_fat_id'];
var qs = new URLSearchParams(window.location.search);
var urlClickIdKey = null;
for (var i = 0; i < CLICK_IDS.length; i++) {
if (qs.get(CLICK_IDS[i])) { urlClickIdKey = CLICK_IDS[i]; break; }
}// Parse existing cookie.
var existing = null;
var match = document.cookie.match(/(?:^|;\s*)gmx_first_touch=([^;]+)/);
if (match) {
try { existing = JSON.parse(decodeURIComponent(match[1])); } catch (e) { existing = null; }
}// GWP-273 — referrer-enrichment branch.
// Keep existing unless either (a) URL carries a new click id
// the stored payload lacks (paid click is a higher-value
// signal and upgrades direct/organic), OR (b) the stored
// payload has empty referrer AND the current document.referrer
// is non-empty + external (Safari/ITP/policy-quirk catch:
// first-hit may have missed the referrer; later same-session
// page-loads can recover it).
var existingHasRef = !!(existing && existing.referrer && existing.referrer !== '');
var docRef = document.referrer || '';
var refHost = '';
if (docRef) {
try {
refHost = new URL(docRef).hostname.replace(/^www\./, '').toLowerCase();
} catch (e) { refHost = ''; }
}
var ownHost = (location.host || '').replace(/^www\./, '').toLowerCase();
var currentExternalRef = !!(refHost && refHost !== ownHost);
var canEnrichRef = !!existing && !existingHasRef && currentExternalRef;if (existing) {
if (!urlClickIdKey && !canEnrichRef) return;
if (urlClickIdKey && existing[urlClickIdKey] && !canEnrichRef) return;
}var utm_keys = [
'utm_source','utm_medium','utm_campaign','utm_content','utm_term',
'utm_adgroup','utm_matchtype','utm_network','utm_device','utm_placement'
];
// GWP-273 — merge-preserving base. When enriching an existing
// payload, retain its landing_url + ts + prior click ids /
// utms; only overlay referrer (and any click id appended below
// via the forEach). Branches with/without urlClickIdKey were
// collapsed — both produced the identical Object.assign — the
// click id is added uniformly later.
//
// GWP-273 design choice: "latest external referrer wins" —
// accepted edge case where a user opens a new external tab
// post-empty-first-touch and returns; low-volume, simple, no
// sentinel flag needed.
var data;
if (existing && canEnrichRef) {
data = Object.assign({}, existing, { referrer: docRef });
} else {
data = { landing_url: window.location.href, referrer: docRef, ts: Date.now() };
}
utm_keys.concat(CLICK_IDS).forEach(function (k) {
var v = qs.get(k);
if (v) data[k] = v;
});
// GWP-208 — carry Meta's first-party click-linker cookies (_fbc
// = fb.1.<ts>.<fbclid>, _fbp) into the captured payload so they
// ride the persistent gmx_first_touch cookie cross-page (LP X →
// LP Y) the same way the URL click-ids do. The CF7 hidden-field
// populator copies the whole payload verbatim, so fbc/fbp reach
// the lead even when the form lives on a page without ?fbclid.
var fbcMatch = document.cookie.match(/(?:^|;\s*)_fbc=([^;]+)/);
if (fbcMatch && fbcMatch[1]) data.fbc = decodeURIComponent(fbcMatch[1]);
var fbpMatch = document.cookie.match(/(?:^|;\s*)_fbp=([^;]+)/);
if (fbpMatch && fbpMatch[1]) data.fbp = decodeURIComponent(fbpMatch[1]);
var encoded = encodeURIComponent(JSON.stringify(data));
if (encoded.length > 3800) return;
var expires = new Date(Date.now() + 90 * 864e5).toUTCString(); // GWP-143 C1: match Google Ads 90-day attribution window
var secure = window.location.protocol === 'https:' ? '; Secure' : '';
document.cookie = 'gmx_first_touch=' + encoded + '; Path=/; Expires=' + expires + '; SameSite=Lax' + secure;
} catch (e) {}
})();
/* Meta Pixel base — inline in wp_head so Breeze Delay-All-JS does not defer it; fbevents.js is async-injected (optimizer-invisible). */
!function(f,b,e,v,n,t,s){if(f.fbq)return;n=f.fbq=function(){n.callMethod?
n.callMethod.apply(n,arguments):n.queue.push(arguments)};if(!f._fbq)f._fbq=n;
n.push=n;n.loaded=!0;n.version='2.0';n.queue=[];t=b.createElement(e);t.async=!0;
t.src=v;s=b.getElementsByTagName(e)[0];s.parentNode.insertBefore(t,s)}(window,document,'script',
'https://connect.facebook.net/en_US/fbevents.js');/* Symmetric with server GMX_Consent: revoke BEFORE init; cookies/sends held until grant. */
fbq('consent', 'revoke');
fbq('init', '1857131551802431');
fbq('track', 'PageView'); /* queued; flushed to Meta only after consent grant *//* Grant bridge — reads the SAME ATR marketing signal as GMX_Consent.applyConsent(). */
(function () {
function read(name){var m=document.cookie.match('(?:^|; )'+name.replace(/([.*+?^${}()|[\]\\])/g,'\\$1')+'=([^;]*)');return m?decodeURIComponent(m[1]):'';}
function marketingGranted(){
try {
var given = read('atr_cookie_notice_consent_given');
if (!given) return false; // undecided -> stay revoked
var c = JSON.parse(read('atr_cookie_notice_consent') || '{}');
return !!(c.marketing || c.ad_storage === 'granted');
} catch (e) { return false; } // NO-SILENT-OK: parse/read failure degrades gracefully to revoked (consent stays held; no marketing send) — not an error to report.
}
function apply(){ if (marketingGranted()) fbq('consent', 'grant'); }
apply();
document.addEventListener('click', function(ev){
if (ev.target && ev.target.closest && ev.target.closest('[class*="atr-cookie"], #atr-cookie-notice')) setTimeout(apply, 50);
}, true);
window.addEventListener('storage', apply);
})();
var breeze_prefetch = {"local_url":"https://gomixapp.com","ignore_remote_prefetch":"1","ignore_list":["/cart/","/checkout/","/my-account/","https://gomixapp.co.il/(.)/u05d4u05d8u05d5u05e4u05e1-u05e0u05e9u05dcu05d7-u05d1u05d4u05e6u05dcu05d7u05d4/","wp-admin","wp-login.php"]};
//# sourceURL=breeze-prefetch-js-extra
Interactive business presentations are the most effective tool for upgrading sales teams in 2026. GoMixApp lets you deliver striking digital presentations in meetings, conferences and trade shows — including seamless offline operation, full support for B2B product catalogs and digital presentations with tailored user experience. Over 300 companies have already chosen us as of 2026.
Interactive Business Presentations and Digital Presentations
Our animated, interactive content is carefully crafted by the GoMixApp professional team so that every interactive business presentation leaves an unforgettable impression and helps achieve your marketing goals. The presentations include video and multimedia support, real-time data analytics and a design tailored for user experience.
Need a interactive presentation? For more details fill in your details and we will get back to you shortly.
Customer Case: Teva Pharmaceuticals
Interactive Presentation, Teva Pharmaceuticals
A digital presentation system built for the sales team and managers of Teva Pharmaceuticals. The interface enables fast navigation between product lines, explainer videos, research data and regulatory documents — all in a unified touchscreen interface that is easy to operate. Field teams can present to customers at conferences, professional meetings and physician gatherings without juggling hundreds of separate PowerPoint files. Centralized content management enables real-time updates to every workstation across the organization.
Advantages
Multi-device compatibility
The presentations are fully compatible for displaying content on all types of screens.
Data security
We use advanced encryption for data transfer, provide secure access for content management and enable compartmentalized permission management for end users.
Stunning Designed Business Presentation
Our studio will guide you through full custom tailoring of the design and interactivity required in your presentations, using our advanced content editor.
Our platform complies with the ISO standard, which guarantees information management at the highest standards. The standard includes strict security procedures for data management, access control and protection against potential threats — ensuring your information is optimally protected.
Cloud Data Organization & Analytics
Track presentation performance (offline and/or online), so you get a complete picture of their effectiveness
Customer Case: Rafa Laboratories
Interactive Presentation, Rafa Laboratories
An interactive digital presentation for the marketing and sales teams at Rafa Laboratories. The platform makes it possible to present product lines, efficacy data, success stories and medical training materials in a single unified interface for every customer meeting. Field representatives save preparation time before each meeting, present current and approved content, and deliver a professional presentation experience aligned with brand standards. Support for multimedia, video, animation and interactive charts.
The Benefits of Interactive Business Presentations
Business presentations on GoMixApp are divided into three main tiers:
Tier One: A product catalog with simple navigation that gathers all your existing marketing materials such as videos, presentations and brochures.
Tier Two: Advanced interactive presentations for delivering messages. Need a slide with drag-and-drop? Animation? A calculator? 3D? Our studio will help quickly and professionally.
Tier Three: Creation of an experiential presentation, such as a slide with a trivia game that can be used at conferences to attract an audience to your booth or to break the ice in a customer meeting.
Customer Testimonials
Pinchas
Homeowner association, Ramla
Service:
★★★★★
Product:
★★★★★
Recommendation:
★★★★★
“With the holiday videos you really nailed it — the residents were truly thrilled!”
Mor
Academic institution
Service:
★★★★★
Product:
★★★★★
Recommendation:
★★★★★
“The digital bulletin board looks amazing and everything works smoothly!”
Inbar Shmueli
Business owner
Service:
★★★★★
Product:
★★★★★
Recommendation:
★★★★★
“Personal and professional service, fast response, excellent product, very satisfied”
Want to change presentation content? You have full access to easy edits via our advanced content editor, which gives you complete control over the content, design and functionality of the presentation. With an internet connection, presentations update automatically across all marketing representatives, and they always have the most up-to-date version. An additional advantage is the statistics dashboard, which lets you track presentation usage in real time and understand which sections perform best. This way you can continuously improve the presentations and achieve optimal results. Don’t miss the opportunity to bring your business to the next level with impressive and effective B2B Pro Classic presentations. Join hundreds of satisfied customers who already use the GoMixApp platform to generate exceptional results. These interactive presentations deliver especially impressive achievements in face-to-face customer meetings, at conferences and trade shows. The engaging presentations create a rich user experience and enable the marketing message to be delivered effectively and precisely. In addition, we provide you with full access to change content via our advanced content editor, which gives you complete control over the content, design and functionality of the presentation.
A secure digital presentation system for one of Israel’s leading defense companies. The interface includes system solution displays, interactive demos, modular navigation between units and categories, and project statistics. The solution enables technical marketing teams and business development representatives to present to international customers, delegations and defense forums in a professional, secure manner with full version control. Permission management is built in at the user and content-unit level.
It’s time to upgrade your marketing and sales team with high-grade interactive presentations. The GoMixApp platform offers digital presentations with tailored user experience, advanced interactivity tiers and design that delivers your marketing messages to customers in the most effective way. The presentations are always available and up to date, including seamless offline operation — and full control over content and permissions for every team member.
GoMixApp’s B2B Pro Classic presentations come in three tailored tiers: a Basic tier for small businesses seeking a fast entry to the world of digital presentations; a Pro tier for complex sales teams with high interactivity needs; and an Enterprise tier with custom solutions for large B2B platforms, multi-user management and a flexible B2B Pro Classic pricing policy.
Digital presentations with tailored user experience are no longer a competitive advantage — they are a necessity for every B2B business in the 2026 market. Sales teams that use interactive presentations for sales teams close deals faster, present with confidence in any environment, and measure results in real time. GoMixApp delivers all of this in one unified solution — with Hebrew support, custom design and full access even offline. Over 300 companies have already joined, and many report measurable improvement in sales results within 60 days. Last updated: January 2026.
Customer Case: Haifa Port
Interactive Presentation, Haifa Port
A comprehensive digital presentation for Haifa Port — one of the largest and most veteran seaports in Israel. The presentation showcases port operations, real-time cargo data, flagship projects, operational capabilities and up-to-date statistics in an interactive interface for meetings with customers, suppliers, international delegations and government bodies. A blend of interactive maps, operational video and dynamic graphs provides a modern, persuasive presentation experience.
Already Collaborating With Us
How Digital Presentations Boost B2B Sales
Interactive presentations for sales teams let representatives present products and services dynamically — with animations, video, product catalogs and live data. Unlike static decks, an interactive business presentation invites the customer into the content and creates a conversation, not a monologue. Studies show B2B presentations with interactive elements raise close rates by 35% on average.
Offline business platforms such as GoMixApp let your team work anywhere — including no-signal zones and international conferences. Presentation editing tools are built into a friendly interface, so even without technical knowledge content can be updated in minutes. According to digital signage standards common in the industry, interactive displays increase engagement time by 60% compared to static displays.
Key benefits of interactive presentations for sales teams:
Real-time data analytics — see which slides drew the most interest
Video and multimedia support — present products in 360 degrees
Design tailored for user experience — an intuitive interface for the rep and the customer
Full offline operation — no dependence on an internet connection
Centralized permission management — every rep sees only what is relevant to them
Sales-team compatibility — automatic content sync across all users
Key Takeaways
Custom-tailored digital presentations raise conversion rates in sales meetings.
Integrating interactive elements improves audience engagement and information retention.
Smart visual design delivers the brand message more clearly and persuasively.
Advanced presentation tools deliver real-time data on viewer behavior.
Adapting dynamic content to the target audience shortens sales cycles and builds customer trust.
Frequently Asked Questions
What is an interactive business presentation and how is it different from a regular one?
An interactive business presentation lets the customer navigate between content, watch embedded videos and receive real-time data — unlike a static presentation that plays in a fixed order. The presentation becomes a two-way conversation that increases engagement and close rates.
What is the 5-5-5 rule in business presentations?
The 5-5-5 rule states that an effective presentation should contain no more than 5 main slides, no more than 5 bullet points per slide and no more than 5 lines per bullet. The principle keeps the message focused and the audience engaged throughout the presentation.
Do interactive business presentations work without an internet connection?
Yes. The GoMixApp solution was designed specifically for full offline operation, so sales reps can present anywhere — in field meetings, conferences and events — with no dependence on a network connection. Content updates sync automatically when the connection returns.
How does real-time data analytics help B2B sales teams?
Real-time data analytics lets sales managers see which slides and content drew interest, how long the customer spent on each section and which CTAs produced results. The data helps improve the presentation and tailor it to the target audience.
What is the pricing policy for B2B Pro Classic presentations at GoMixApp?
GoMixApp’s B2B Pro Classic pricing policy is divided into three tiers: Basic for small businesses, Pro for complex sales teams, and Enterprise for large platforms with multi-user management. To get a tailored quote, contact a representative directly.
Comparison: Interactive Presentations vs. Traditional Static Decks
Feature
Interactive Presentations (GoMixApp)
Static Decks (PowerPoint/PDF)
Offline operation
✓Full and unrestricted in any environment
✓but with no updates or content sync
Data analytics
✓Real-time reports on viewer engagement
✗No built-in measurement tools
Video and multimedia support
✓Video, animation and dynamic catalogs
Partial — basic video, no dynamic catalogs
Central content updates
✓One change updates across all representatives
✗Each rep updates the file separately
Team permission management
✓Each rep sees only the content relevant to them
✗Identical access for all users
Tailored user experience
✓Free navigation and a path tailored to the customer
✗Linear, fixed presentation only
In summary: why choose GoMixApp’s presentation solution?
In this article we reviewed why interactive business presentations have become a real necessity for every B2B sales team in 2026. We saw how real-time data analytics, video and multimedia support, and full offline operation — all directly impact close rates and customer experience. Digital presentations with tailored user experience are no longer a “nice to have” — they are the difference between a deal that closes and a deal that is lost.
GoMixApp brings you the technology, professional design and support required so your team walks into every meeting with full confidence. Over 300 Israeli companies have already chosen our solution and report measurable improvement. Last updated: January 2026.
Want to see how it works for your team? Contact us now and together we’ll build the presentation that closes your next deal.
document.addEventListener('click', function(e) {
var el = e.target.closest('.gmx-lite-yt');
if (!el) return;
var vid = el.getAttribute('data-vid');
if (!vid) return;
var iframe = document.createElement('iframe');
iframe.src = 'https://www.youtube.com/embed/' + vid + '?autoplay=1';
iframe.style.cssText = 'position:absolute;top:0;left:0;width:100%;height:100%;border:0;';
iframe.allow = 'autoplay;encrypted-media';
iframe.allowFullscreen = true;
el.style.position = 'relative';
el.innerHTML = '';
el.appendChild(iframe);
});
(function () {
var c = document.body.className;
c = c.replace(/woocommerce-no-js/, 'woocommerce-js');
document.body.className = c;
})();
var gmxCf7LegacyUxI18n = {"errName":"Please enter a full name","errPhone":"Please enter a valid phone number","errEmail":"Please enter a valid email address","errRequired":"Required field"};
//# sourceURL=gmx-cf7-legacy-ux-js-extra
var gmxCf7UxI18n = {"progressTemplate":"{N} field(s) remaining","allSet":"All set to send!","sending":"Sending\u2026","successTitle":"Thank you! Your inquiry has been received","successBody":"A representative will get back to you within 24 hours with a tailored quote.","successCtaLabel":"See our areas of expertise","successCtaHref":"/expertise/","errorTitle":"Submission failed","errorBody":"Please try again, or call us directly"};
//# sourceURL=gmx-cf7-ux-js-extra
var atrCookieNoticeSettings = {"cookieName":"atr_cookie_notice_consent","decisionCookieName":"atr_cookie_notice_consent_given","expiryDays":"365","autoHideDelay":"0","enableDebug":"","siteName":"GoMixApp","isPrivacyPage":"","privacyPolicyUrl":"https://gomixapp.com/privacy-policy/","privacyNoteText":"\ud83d\udca1 You can read this page while deciding about cookies","mode":"simple"};
//# sourceURL=atr-cookie-notice-simple-js-extra
(function(){
function cleanUrl(url) {
// Strip query params embedded mid-path: /ID?params/file -> /ID/file
return url.replace(/\?[^\/]+\//g, '/');
}
function addWebPFallback(pic) {
if (pic.getAttribute('data-webp-fb')) return;
pic.setAttribute('data-webp-fb', '1');
var img = pic.querySelector('img');
if (!img) return;
img.onerror = function() {
this.onerror = null;
this.src = cleanUrl(this.src).replace('vi_webp','vi').replace('.webp','.jpg');
var sources = this.parentElement.querySelectorAll('source');
for (var i = 0; i < sources.length; i++) {
sources[i].srcset = cleanUrl(sources[i].srcset).replace('vi_webp','vi').replace('.webp','.jpg');
}
};
}
var observer = new MutationObserver(function() {
var pics = document.querySelectorAll('.video-seo-youtube-picture');
for (var i = 0; i < pics.length; i++) addWebPFallback(pics[i]);
});
observer.observe(document.documentElement, { childList: true, subtree: true });
})();
(function(){
var siteKey = "6Ldnu_gsAAAAAGpkh7vCd_h3L9BA193yFU59I4Do";
var action = "submit_lead_form";
var loaderUrl = "https:\/\/www.google.com\/recaptcha\/enterprise.js?render=6Ldnu_gsAAAAAGpkh7vCd_h3L9BA193yFU59I4Do";
// GWP-506 (perf): the reCAPTCHA Enterprise runtime costs ~900ms of main-thread
// work (PSI contactus TBT 660ms, perf 69). It was loaded eagerly on every page
// carrying a CF7 form. It now loads on the FIRST real page interaction
// (scroll/pointer/key/touch) — warming the runtime well before the user can
// reach submit — and never loads on a no-interaction (lab) page view, so the
// perf win holds. The token is still stamped on form focusin and refreshed at
// submit. IMPORTANT: the server gate is fail-CLOSED by default (GWP-412
// require_token) — a missing token at submit is treated as spam — so the
// runtime MUST be warm before submit; that is exactly why the warm trigger is
// first-page-interaction, NOT focusin-only (focusin-only left a race where a
// fast focus→submit could POST before the ~900ms download finished and drop a
// legit lead). The eager <script src> is gone.
var greReady = false, greWaiters = [], greLoadStarted = false;
function pollGre(attempts) {
if (typeof grecaptcha !== 'undefined' && grecaptcha.enterprise) {
greReady = true;
var queued = greWaiters;
greWaiters = [];
queued.forEach(function (fn) { try { fn(); } catch (e) {} });
return;
}
if (attempts > 200) {
// no-silent-failures: enterprise.js never became ready (network-blocked,
// consent/privacy blocker, or a Google outage). Surface it — a missing
// token fails CLOSED server-side (GWP-412) and drops the lead.
if (window.console && console.warn) {
console.warn('[GMX recaptcha] enterprise.js not ready after ~10s; token will be missing (submit fails closed).');
}
return; // give up after ~10s (200 * 50ms)
}
setTimeout(function () { pollGre(attempts + 1); }, 50);
}
function loadGre() {
if (greLoadStarted) return;
greLoadStarted = true;
var s = document.createElement('script');
s.src = loaderUrl;
s.async = true;
document.head.appendChild(s);
pollGre(0); // begin polling only once the runtime is actually loading
}
function whenGreReady(cb) {
if (greReady) return cb();
greWaiters.push(cb);
}
function stampToken(form) {
if (!form.querySelector('.wpcf7-form-control-wrap input[type="submit"], .wpcf7-submit')) return;
loadGre(); // lazy: kick off enterprise.js on demand (idempotent)
whenGreReady(function () {
grecaptcha.enterprise.ready(function () {
grecaptcha.enterprise.execute(siteKey, { action: action }).then(function (token) {
var hidden = form.querySelector('input[name="gmx_recaptcha_token"]');
if (!hidden) {
hidden = document.createElement('input');
hidden.type = 'hidden';
hidden.name = 'gmx_recaptcha_token';
form.appendChild(hidden);
}
hidden.value = token;
}).catch(function () {
// no-silent-failures: token generation failed; the server gate is
// fail-CLOSED (GWP-412), so this submit will be rejected as spam.
if (window.console && console.warn) {
console.warn('[GMX recaptcha] token execute failed; submit will fail closed.');
}
});
});
});
}
document.addEventListener('wpcf7submit', function (e) { stampToken(e.target); });
// Also stamp on first focus into any CF7 form (so token ready before submit).
// `whenGreReady()` queues the stamp until grecaptcha loads, so the once-
// listener stays safe even if grecaptcha isn't ready at focus-in time.
document.querySelectorAll('form.wpcf7-form').forEach(function (form) {
form.addEventListener('focusin', function once() {
form.removeEventListener('focusin', once);
stampToken(form);
});
});
// GWP-506: warm enterprise.js on the FIRST real page interaction so the ~900ms
// runtime is ready before the user reaches submit (closes the focusin-only race
// against the fail-CLOSED server gate, and covers AJAX/popup-injected forms that
// missed the focusin binding above). Never fires on a no-interaction (lab) view,
// so the perf win holds. Idempotent via loadGre()'s greLoadStarted guard.
var warmOpts = { passive: true, capture: true };
var warmEvents = ['pointerdown', 'keydown', 'touchstart', 'scroll'];
function warmGre() {
loadGre();
warmEvents.forEach(function (e) { window.removeEventListener(e, warmGre, warmOpts); });
}
warmEvents.forEach(function (e) { window.addEventListener(e, warmGre, warmOpts); });// GWP-507 (CONFIRMED LIVE: 19 real leads dropped in 8 days): capture-phase
// submit GATE. The warm/focusin logic above only *helps* the token be ready;
// it is NOT a guarantee. The race: a user whose FIRST interaction is clicking
// submit on an autofilled form (no prior scroll/field-touch to warm the
// ~900ms enterprise.js), or who submits before the runtime readies, serializes
// the AJAX POST with an EMPTY gmx_recaptcha_token → the fail-CLOSED server gate
// (GWP-412 require_token) drops the lead as spam. CF7's `wpcf7submit` fires
// AFTER the AJAX POST (too late), and CF7 exposes no documented pre-POST JS
// hook (verified: contactform7.com/dom-events). So the ONLY seam is to
// intercept the native DOM submit/click in CAPTURE phase, HOLD it until
// greReady + token stamped, then re-dispatch. grecaptcha token lifetime is
// 2 minutes, so holding briefly is safe.
//
// TIMEOUT-FALLBACK CHOICE (a): if enterprise.js never readies within the
// ~10s ceiling (network-blocked / consent-blocker / Google outage), we
// RE-ENABLE the button and let the submit proceed WITHOUT a token rather than
// hard-blocking the user. It will fail-CLOSED server-side (GWP-412), but the
// console.warn fires loudly (no-silent-failures) — we never trap a real user
// behind a spinner they can't escape.
var GATE_TIMEOUT_MS = 10000; // matches pollGre ceiling (200 * 50ms).
function gmxFormHasToken(form) {
var hidden = form.querySelector('input[name="gmx_recaptcha_token"]');
return !!(hidden && hidden.value);
}
function gmxSetVerifying(form, on) {
var btn = form.querySelector('.wpcf7-submit, input[type="submit"], button[type="submit"]');
if (!btn) return;
if (on) {
btn.disabled = true;
btn.setAttribute('data-gmx-verifying', '1');
} else {
btn.disabled = false;
btn.removeAttribute('data-gmx-verifying');
}
}
function gmxReleaseSubmit(form) {
// Mark released so the re-dispatched submit passes straight through the
// capture gate (no re-gate loop), re-enable UX, then re-trigger.
form.__gmxGateReleased = true;
gmxSetVerifying(form, false);
if (typeof form.requestSubmit === 'function') {
form.requestSubmit();
} else {
form.dispatchEvent(new Event('submit', { bubbles: true, cancelable: true }));
}
// GWP-507 finding-1 (BLOCKER fix): reset the release flag on the NEXT tick
// so any FUTURE user submit (user edits a field + resubmits) is re-gated and
// stamps a FRESH token. reCAPTCHA tokens are single-use with a ~2-min
// lifetime — without this reset, __gmxGateReleased stayed true forever after
// the first release, letting a second submit bypass the gate and POST a
// stale/used token. The setTimeout(0) lets the synchronous re-dispatch above
// complete (which short-circuits on the still-true flag) before we re-arm.
setTimeout(function () { form.__gmxGateReleased = false; }, 0);
}
function gmxSubmitGate(e) {
var form = e.currentTarget;
if (form.tagName !== 'FORM') { form = form.form || form.closest('form.wpcf7-form'); }
if (!form) return;
// Idempotent: a programmatic re-submit we already released proceeds. This is
// the ONLY pass-through — it lets the freshly-stamped re-dispatch reach CF7.
// (The flag is reset on the next tick in gmxReleaseSubmit, so the NEXT user
// submit is re-gated.)
if (form.__gmxGateReleased) return;
// GWP-507 finding-2 (stale/used token fix): every USER submit HOLDS + stamps
// a FRESH token — we do NOT early-return on an already-present token. A token
// already sitting in the hidden input may be stale or already used (single-
// use, ~2-min lifetime); proceeding on it would POST a dead token. enterprise.js
// is warm by submit time, so grecaptcha.enterprise.execute() resolves in
// ~100-300ms — the per-submit hold is brief. stampToken() OVERWRITES the
// hidden input value (hidden.value = token), so no stale token lingers.
// HOLD: block CF7's submit handler before the AJAX POST.
e.preventDefault();
e.stopImmediatePropagation();
if (form.__gmxGateWaiting) return; // a click + submit may both fire; hold once.
form.__gmxGateWaiting = true;
loadGre(); // kick the warm if not started.
gmxSetVerifying(form, true);
var released = false;
function release(missing) {
if (released) return;
released = true;
form.__gmxGateWaiting = false;
if (missing && window.console && console.warn) {
console.warn('[GMX recaptcha] submit gate timed out (~10s); releasing without token (submit fails closed).');
}
gmxReleaseSubmit(form);
}
var timer = setTimeout(function () { release(true); }, GATE_TIMEOUT_MS);
whenGreReady(function () {
stampToken(form);
// stampToken resolves the token asynchronously (enterprise.execute
// promise); poll briefly for the stamp, then release. Bounded by the
// same overall timer above.
(function awaitStamp(n) {
if (released) return;
if (gmxFormHasToken(form)) { clearTimeout(timer); release(false); return; }
if (n > 200) { clearTimeout(timer); release(true); return; } // ~10s (200*50ms)
setTimeout(function () { awaitStamp(n + 1); }, 50);
})(0);
});
}
// GWP-507 finding-4 (CF7 phase): WHY capture phase works. Our gate listener is
// registered in CAPTURE phase (3rd arg `true`), so it runs BEFORE CF7's own
// bubble-phase 'submit' handler on the same form. When we call
// e.stopImmediatePropagation() in the capture listener, the DOM spec stops ALL
// further listeners for that event on the target — including the later
// bubble-phase CF7 handler — so CF7's AJAX POST never fires until we re-dispatch
// with a fresh token. This capture-phase interception is the only documented
// pre-POST seam: CF7 exposes no pre-POST JS hook (wpcf7submit fires AFTER the
// AJAX POST). See contactform7.com/dom-events.
document.querySelectorAll('form.wpcf7-form').forEach(function (form) {
form.addEventListener('submit', gmxSubmitGate, true);
var btn = form.querySelector('.wpcf7-submit, input[type="submit"], button[type="submit"]');
if (btn) { btn.addEventListener('click', gmxSubmitGate, true); }
});
})();
(function(){
var loaded = false;
function loadUserWay() {
if (loaded) return;
loaded = true;
var el = document.createElement('script');
el.setAttribute('data-account', "UX40fo0Ctw");
el.setAttribute('data-language', "en");
el.setAttribute('src', 'https://cdn.userway.org/widget.js');
document.body.appendChild(el);
events.forEach(function(e){ window.removeEventListener(e, loadUserWay, {passive: true}); });
}
var events = ['scroll', 'mousemove', 'touchstart', 'click', 'keydown'];
events.forEach(function(e){ window.addEventListener(e, loadUserWay, {passive: true}); });
})();
