Users on very slow networks can fill and submit the form before wplf-form.js has loaded

[k1sul1]

I throttled my connection to "Slow 3G" in Chrome devtools, loaded a page with a form in it, filled an input and clicked select. This resulted in ?name=mirri+2&referrer=https%3A%2F%2Flibreformbuilder.local%2Fform%2F&_referrer_id=71&_form_id=114 appending to the URL, and a 404 was displayed.

I propose using display: none; on the form and removing it when the script has loaded.

[k1sul1]

I decided to use visibility instead, and tabindex -1 with it. That should prevent all but bots from filling the form.

I'm not sure if that's what we should ship though. If you're on a real potato network, it might take many seconds before the form is visible. Maybe we should show some type of loading text if it takes more than 500ms, but I'm not sure how to implement that.

The technical side is a non-issue, it's the UX that I'm worried about.

[k1sul1]

@libreform/maintainers thoughts on the loading indicator?