CloudFlare discussion thread

[Moonchild]

Yeah, but I think Moonchild implemented the things into Pale Moon that were required in order to pass the CF checks now.

Yes and no.

They indicated 3 things. One we already had and wasn't changed (not sure why it was reported). A second was a convenience function that was a minor behavior difference between us and other browsers (ability to request output as json for something). The third seems to have been misreported as well since I didn't exactly get to implement anything for it, but what would be prerequisites for it seems to have solved whatever CF relied on for their tests (CSP pass/fail nuances).

[Sessh]

Interesting. Do you plan to finish implementing the third one or just roll with the prerequisites only?

[Mæstro]

My daily Fanbox visits seem to make me the server canary. As of today, Cloudflare claims ‘success’ after ticking the box, but the page returns to the turnstile on refreshing.

[Gemmaugr]

My daily Fanbox visits seem to make me the server canary. As of today, Cloudflare claims ‘success’ after ticking the box, but the page returns to the turnstile on refreshing.

I got the CF captcha (https://official.fanbox.cc/posts/9869785), but didn't even need to tick it to pass (just allow a few things in eMatrix).

[Moonchild]

Same. got the captcha, it just span for a while then automatically went to the site without needing interaction (I did have to disable my adblocker the site itself to work, though)

[Mæstro]

Disabling µBlock altogether is a red line for me; I have never needed do this on any site before. Because of this, the other Fanbox weirdness that has befallen me since February and the fact that Fanbox is the most peculiar site I treat by far (eg if not for it, I would just disable CSS animations), I am more inclined just to view Fanbox through Epiphany, where the native advert-blocking does not break anything. I see the fault as laying firmly with Fanbox and Cloudflare and nobody else.

Despite all this, just now, Fanbox loaded normally, without the Cloudflare turnstile. This is the least consistent site I know.

[frostknight]

Disabling µBlock altogether is a red line for me; I have never needed do this on any site before.

Agree here 100%

[Moonchild]

Disabling µBlock altogether is a red line for me; I have never needed do this on any site before.

Agree here 100%

It loaded later on with the blocker enabled; I'm not sure why it refused to work for me the first go. Regardless, I think that was a pixiv site issue, not a cloudflare issue, because it was the target site itself loading incorrectly and had already passed CF.

[q160765803]

http://share.acgnx.se/ keeps looping CF security check page to me now.

[Moonchild]

Confirmed looping/long waits there. However, the https version seems to work.
I'll report this behaviour.

[Sessh]

Has the temporary measures allowing Pale Moon to get through Cf prompts been removed yet? Last I heard, PM was working on their test page with no special permissions granted, so are the training wheels off as of now or not yet?

I have not been stopped yet by any CF prompts though some seem to take awhile to load the checkbox (the red text appears saying it's taking longer than usual, do you want to send feedback etc..) and then the box comes up. I click it and it goes right through.

[frostknight]

I have not been stopped yet by any CF prompts though some seem to take awhile to load the checkbox (the red text appears saying it's taking longer than usual, do you want to send feedback etc..) and then the box comes up. I click it and it goes right through.

That's definitely a blessing if the problem is only taking longer and not being outright blocked/looping.

[Moonchild]

Has the temporary measures allowing Pale Moon to get through Cf prompts been removed yet?

I don't know. Without word from CF's side, I don't think so. It's been quiet from their side.

I have not been stopped yet by any CF prompts though some seem to take awhile to load the checkbox (the red text appears saying it's taking longer than usual, do you want to send feedback etc..) and then the box comes up. I click it and it goes right through.

The issue is: we don't know if that is because CF's exceptions are in place or because CF fixed their checks, or if it's because of the changes we made.

One thing I know is that 33.8.0, last I checked, passed their "no training wheels" test site (unlike 33.7.x). Feel free to check, yourself:
https://browser-compat.turnstile.workers.dev/

[Sessh]

Yeah it works for me. It just takes maybe 10 seconds or so for the checkbox to load, but clicking it works fast.

[Pelican]

Yeah it works for me. It just takes maybe 10 seconds or so for the checkbox to load, but clicking it works fast.

Same here with my custom build. But it takes a while.

[Sessh]

Even in a clean profile, it still takes about 10 seconds for the checkbox to load. Not much going on in the console. I see this:

Code: Select all

Error:   			v1:1:36965
/.*.*=.*/  			v1:1:36965
function ()  			v1:1:36965
<a>  				v1:1:36965

At the bottom, it says "Error:" too, but says "Turnstile Challenge Successful!" under that with a token. Doesn't seem to be an error at all.

[Lucio Chiappetti]

On https://www.meteoblue.com/it/tempo/sett ... ia_3166763 (preloaded with 1-hr view, with uBlock Origin, no site login) I was jumping to other localities from the site search box, then going Back with the Back button. Today (possibly I visited a bit more places than usual, say six instead of two, so I was spotted as candidate bot ?) I got the Cloudflare challenge (and passed it). Now when I do Reload to update the time of the page I get the Palemoon confirm popup ("To display this page, Pale Moon must send information that will repeat any action (such as a search or order confirmation) that was performed earlier"). I press Resend and everything continues OK ... but it looks like "somebody is remembering something"

[q160765803]

Yup, seeing the same here on the Turnstile thingie (https://browser-compat.turnstile.workers.dev/). Allowed Cloudflare and Tailwind. Tried 3 times. All "Challenge Failed. Error: 600010". Sent a feedback report.

I got different errors, maybe different network environment?

Once test page is loaded, it shows:

Code: Select all

10:34:12.626 Turnstile widget rendered with ID: cf-chl-widget-oele3 1 browser-compat.turnstile.workers.dev:166:25
10:34:12.668 Turnstile challenge failed. Error code: 200500 1 browser-compat.turnstile.workers.dev:105:21
	onTurnstileError https://browser-compat.turnstile.workers.dev/:105:21
	T/q.onerror https://challenges.cloudflare.com/turnstile/v0/api.js:1:32141

Then it self-reloaded with different error:

Code: Select all

10:34:24.320 Turnstile Widget seem to have hung:  oele3 1 api.js:1:19056
10:34:24.323 Turnstile challenge failed. Error code: 300030 1 browser-compat.turnstile.workers.dev:105:21
	onTurnstileError https://browser-compat.turnstile.workers.dev/:105:21
	N https://challenges.cloudflare.com/turnstile/v0/api.js:1:37187
	zr https://challenges.cloudflare.com/turnstile/v0/api.js:1:19194
	kt/e.watchCatInterval< https://challenges.cloudflare.com/turnstile/v0/api.js:1:19592
10:34:24.324 [Cloudflare Turnstile] Error: 300030. 1 api.js:1:10135

[Moonchild]

It takes a few seconds, but it passes without issue for me on 33.8.0

11:07:58.557 Turnstile challenge successful! Token: 0.o0udu9xANM5G5Cnxo4rX63h7GadH0MVQzoaIFsGHcZqugATL1eeOT-giWi8cVlF32B31rJVU2ieLT3IY6S-Je5NBjBdF-W50xTzj6KayX1zWLcExMvwPcqn8VSeKCcWfFCd4P-9QVojcEhYemeDtyR9Mu21ch2KEn0R0n8i0RVJ0ey_zdxECsI6fEVO5adzcay_-p4pQJ0_YJy1vkDe0rePh90_3lxy02WQF3M1cLUF_6L0jogutaJuwaPkilaU86QxVK_QrvJEl2MDZ7QV9QxGstDinif8Yvp7xg7BOzVybIsgMwZqzBnu1oescBnM1-g8KCMUaJd3CM5YOfu2ng910VJZTDQdmKbOPneNiq0JyrgYLy9Rp_MFNzZDcvPvY9Rsi_v43o_GDubJi6P-CDrqA6wOm3aXk3POVYxZkzb8SFs9Q5JW5MjevvK9jrUo7FV_E-Cg-tGC6PfLn2GcJmLsXZSpqIbZWcmTDY5TG1yzntX922oN827niOnwgJymZG0IhGLKxVjhb4-55Jke_GZsYClcUNUgJqxWJ6_WX7oZjcqTG0qy1NPUkVDV92tH56ixC5TuSB4tzvvJvf4YJ4Ql2hukC3kbU5ak06eSpLKt8VCajH1PqatYt5Ux_yhbvwTQXuDPPlKbboMPKl2Tb_kbAHWtHIG1YiSWuqF-DmIcHgsdnAqRRLJlBHaz0bn-6KO-rzIDx5AYKKDBR00PJeOFipDVRAcq0HNBOmPMkzCRF3hRv0x0O_vTjlLhQSkLeSUS5Zv2y9cHuVE--UvpR3U0mmAtlA2pF-LA7HljzN2R_6iotW1tt8WvpHq6OT2cWYI0Xji6PGPwM3yYLnO6YmULW4HL7BbkluSB3II2_oDsDJHwb4JlYS-qO0YiwVFaNFmroUIoyIadw2opQxN-_VzSvFdhdAhi9QOHBXXYfkMlhQxUv3RHso80qUY7slV6V.q0AuuqN14d_-rMCFqGKAiA.f34347c8552d363ffa16e3cd1bc377664277f7257b6a0f6ea581dfc75a0cd593 1 browser-compat.turnstile.workers.dev:93:21

[Gemmaugr]

Every cloudflare'd site I've come across, and the turnstile widget, works for me as well. For now.