Project bots can get CAPTCHA even on a private project

Summary

One of my contributors went to open robigalia/meta#34 but discovered that "Your issue has been recognized as spam and has been discarded". This is pretty annoying. It seems any issue with links to that domain get triggered in this way. It was worked around by later editing the link in, which seems like an easy workaround for any spammer to use...

UPDATE: The latest reports of this seem to be a more recently-introduced bug related to project bots. See this comment (#16240 (comment 605933960)) for details. We should consider opening a new bug, or else updating the description of this one accordingly. For now, title has been updated to Project bots can get CAPTCHA even on a private project

Steps to reproduce

Try to open an issue on any repository, with the issue contents containing a link to testanything.

Expected behavior

Issue should be created fine.

Actual behavior

Issue is discarded.