UPDATE (7/16): The issue is now resolved. Forms are no longer affected by the incorrect report.
Our service is currently impacted by an incorrect report to Google’s web-forgery (a.k.a phishing) list. Visitors trying to access a form hosted on FormAssembly.com using Firefox 3.0 or above may in some cases run into a ‘web-forgery’ warning message and be blocked from seeing and filling out the form.
Who is affected:
Your form is not affected by this issue if you are hosting the form on your own site, or if you linked to it using the public address as it is presented in the ‘Publish’ tab under your account (it looks like this: http://app.formassembly.com/forms/view/1 with the last number being different for each form). This should be the case for the vast majority of our users.
Your form is affected only if you somehow obtained the alternative format for the public address and used it in your link. It looks like this: http://app.formassembly.com/index.php?url=/forms/view/1. These types of addresses are currently blocked for visitors using Firefox 3.0 or above.
What you can do if you are affected:
If possible, change the link that points to your form to use the normal public address, as displayed in the ‘publish’ tab under your account. If you can’t change this link, we expect the issue to be fully resolved within a couple days.
What we did to remediate this issue:
We asked Google to remove our site from the list. We are not sure what is Google’s turnaround on this. We are assuming a day or two and hopefully this will all be settled soon.
Why did this happen:
Malicious users sometimes try to abuse our service by creating ‘phishing’ web forms (a.k.a web forgery). We take those forms down as they are reported to us or as they are caught in our automated filters, but it looks like this time the abuse was reported directly to Google’s ‘web forgery’ list.
Unfortunately, Google did not choose to just block the incriminated form. They indiscriminately blocked all our forms, which of course is now affecting legitimate users with legitimate forms. We are lucky that only a small number of forms end up being affected, but we are quite upset at the manner this list is managed. We did not receive any advance warning from Google nor Mozilla, and we can only hope that they are as prompt to remove sites from the list as they are to add them to it.