form.link_in_name

What it looks at#

Scans the name field for:

• a URL with a scheme (https://...) or a www. prefix;
• a bare domain with a common TLD (acme.com, best-seo.xyz);
• an email address.

Real names stay clean: “Dr. J. Smith”, “O’Brien”, “Anne-Marie”, “St. John” and “J.R.R. Tolkien” have no host-shaped part. “John from acme.com” fires, and that is accepted.

location is name, never the value. The subject field has its own check, form.link_in_subject.

Why it matters#

Link-drop bots put their URL in the one field your form forwards or displays without scrutiny. A name is never a URL.