Cloudflare Verification Loop issues

Users and developers helping users with generic and technical Pale Moon issues on all operating systems.

Moderator: trava90

Forum rules
This board is for technical/general usage questions and troubleshooting for the Pale Moon browser only.
Technical issues and questions not related to the Pale Moon browser should be posted in other boards!
Please keep off-topic and general discussion out of this board, thank you!
User avatar
Kand_in_Sky
Fanatic
Fanatic
Posts: 177
Joined: 2013-01-02, 18:22
Location: DE

Re: Cloudflare Verification Loop issues

Post by Kand_in_Sky » 2026-04-10, 15:19

This is all really interesting and in parts, if you understand the behaviour, even entertaining.
I asked Grok about the whole case, why and what happened and basicly Grok agreeds and delivers some solutions.

Why Pale Moon Fails:
Pale Moon (Goanna engine) strictly adheres to the WebGL 1.0.3 specification from 2014, which did not yet include powerPreference.
The Pale Moon developers deliberately refuse to implement features from Editor's Drafts ("work in progress") until they have been finalized as a standard.
Therefore, Pale Moon either throws an error (e.g., invalid attribute) or ignores the option when this call is made—Cloudflare interprets this as deviant behavior and fails the challenge (loop, crash, or block).
This is not a bug in Pale Moon, but a conscious decision by the developers against "draft support."
Cloudflare, on the other hand, adheres to what Chrome/Firefox/Safari currently implement (including draft extensions).

Current status (April 2026):
This problem has existed for several years and resurfaces whenever Cloudflare updates its fingerprinting methods.
There are numerous threads about it in the Pale Moon forum and on community.cloudflare.com –
often concluding that Cloudflare has no interest in providing extra support for Pale Moon (or other niche browsers like Falkon, SeaMonkey, etc.) because, in their opinion, this would weaken bot detection.

If you want to be very conservative and purist in your specifications, you can offer both options as a fallback:

Code: Select all

const contextAttributes = {
    powerPreference: "high-performance",
    preferLowPowerToHighPerformance: false   // only for old browsers
};

const gl = canvas.getContext("webgl", contextAttributes);

Maybe we should inform Cloudflare? Do the know about this new technology AI? It could them help for future devoloping ;-)
PaleMoon, Basilisk, Dactyloidae on
- 2014 Athlon 5350 16GB PC Win7 64Bit
- 2014 i5-4210M 8GB Notebook Win7 64Bit
- 2018 Ryzen 5 2400G 32GB PC Win10 64Bit

thosrtanner
Lunatic
Lunatic
Posts: 476
Joined: 2014-05-10, 18:19
Location: UK

Re: Cloudflare Verification Loop issues

Post by thosrtanner » 2026-04-10, 16:50

I think using an answer suggested by grok might raise a few eyebrows at cloudflare. I mean it does have a slightly chequered history.

User avatar
flamelord
Fanatic
Fanatic
Posts: 118
Joined: 2025-01-31, 03:03

Re: Cloudflare Verification Loop issues

Post by flamelord » 2026-04-10, 17:19

Night Wing wrote:
2026-04-09, 18:14
I tried again to visit the site using Pale Moon and again, I met the CF challenge. This time though, Pale Moon passed the challenge and I visited the site.
Can confirm it works here as well
SSE2 build latest version

Time to test if 4chan works :)

User avatar
andyprough
Forum staff
Forum staff
Posts: 1574
Joined: 2020-05-31, 04:33

Re: Cloudflare Verification Loop issues

Post by andyprough » 2026-04-10, 17:58

flamelord wrote:
2026-04-10, 17:19
Night Wing wrote:
2026-04-09, 18:14
I tried again to visit the site using Pale Moon and again, I met the CF challenge. This time though, Pale Moon passed the challenge and I visited the site.
Can confirm it works here as well
SSE2 build latest version

Time to test if 4chan works :)
Looks like Cloudflare turnstile is working again. I just got into 2 sites that I hadn't been able to access since April 3rd.

User avatar
Night Wing
Knows the dark side
Knows the dark side
Posts: 6021
Joined: 2011-10-03, 10:19
Location: Piney Woods of Southeast Texas, USA

Re: Cloudflare Verification Loop issues

Post by Night Wing » 2026-04-10, 18:10

andyprough wrote:
2026-04-10, 17:58
Night Wing wrote:
2026-04-09, 18:14
I tried again to visit the site using Pale Moon and again, I met the CF challenge. This time though, Pale Moon passed the challenge and I visited the site.
Looks like Cloudflare turnstile is working again. I just got into 2 sites that I hadn't been able to access since April 3rd.
Below is a little bit of humor and irony.

"Will wonders never cease". :thumbup:
MX Linux 25.2 (Infinity) Xfce w/Pale Moon, Waterfox, Firefox
Linux Debian 13.6 (Trixie) Xfce w/Pale Moon, Waterfox, Firefox

User avatar
flamelord
Fanatic
Fanatic
Posts: 118
Joined: 2025-01-31, 03:03

Re: Cloudflare Verification Loop issues

Post by flamelord » 2026-04-10, 18:16

andyprough wrote:
2026-04-10, 17:58


Looks like Cloudflare turnstile is working again. I just got into 2 sites that I hadn't been able to access since April 3rd.
Night Wing wrote:
2026-04-10, 18:10


Below is a little bit of humor and irony.

"Will wonders never cease". :thumbup:
Alas, 4chan isn't working for me
I noticed that the mxlinux forum thing had a tickboxless captcha
I suspect there are 2 different CF captchas, with the tickboxless captcha being far more reasonable

I was able to spawn the tickbox on 4chan(tested on the /a/ board) once but when I clicked on it it just kept looping(no error message though)

User avatar
Night Wing
Knows the dark side
Knows the dark side
Posts: 6021
Joined: 2011-10-03, 10:19
Location: Piney Woods of Southeast Texas, USA

Re: Cloudflare Verification Loop issues

Post by Night Wing » 2026-04-10, 18:29

flamelord wrote:
2026-04-10, 18:16
Alas, 4chan isn't working for me
I noticed that the mxlinux forum thing had a tickboxless captcha
I suspect there are 2 different CF captchas, with the tickboxless captcha being far more reasonable

I was able to spawn the tickbox on 4chan(tested on the /a/ board) once but when I clicked on it it just kept looping(no error message though)
If you get the tickbox as you call it, do not be so fast to check the box. Wait a few seconds, then check the box and you might get in. I got in which my attachment shows.

To quote from an old hunter; "There is more than one way to skin a squirrel (Cloudflare)". ;)
You do not have the required permissions to view the files attached to this post.
MX Linux 25.2 (Infinity) Xfce w/Pale Moon, Waterfox, Firefox
Linux Debian 13.6 (Trixie) Xfce w/Pale Moon, Waterfox, Firefox

User avatar
back2themoon
Knows the dark side
Knows the dark side
Posts: 3306
Joined: 2012-08-19, 20:32

Re: Cloudflare Verification Loop issues

Post by back2themoon » 2026-04-10, 18:48

Amusingly enough, their Turnstile Troubleshooter still loops here but the 3-4 websites I tested are now passing the check.

Assuming this is now fixed patched, I guess we'll be back here on Christmas Eve or something.

User avatar
flamelord
Fanatic
Fanatic
Posts: 118
Joined: 2025-01-31, 03:03

Re: Cloudflare Verification Loop issues

Post by flamelord » 2026-04-10, 18:50

UPDATE: It finally fucking works!!!!
Was able to get through the captcha on /a/ :thumbup: :thumbup: :thumbup:

User avatar
Night Wing
Knows the dark side
Knows the dark side
Posts: 6021
Joined: 2011-10-03, 10:19
Location: Piney Woods of Southeast Texas, USA

Re: Cloudflare Verification Loop issues

Post by Night Wing » 2026-04-10, 18:55

flamelord wrote:
2026-04-10, 18:50
UPDATE: It finally fucking works!!!!
Was able to get through the captcha on /a/ :thumbup: :thumbup: :thumbup:
I was sending you a reply, but you deleted the post before I sent mine back to you. Then your post above appeared. Looks like you took my advice and waited a few seconds before clicking on the "checkbox".

Looks like it takes a little bit of "patience" to make things work when dealing with CF. But even I have to admit, sometimes when I have to deal with CF, my patience runs out when things do not work out.
MX Linux 25.2 (Infinity) Xfce w/Pale Moon, Waterfox, Firefox
Linux Debian 13.6 (Trixie) Xfce w/Pale Moon, Waterfox, Firefox

thosrtanner
Lunatic
Lunatic
Posts: 476
Joined: 2014-05-10, 18:19
Location: UK

Re: Cloudflare Verification Loop issues

Post by thosrtanner » 2026-04-10, 19:36

jobbautista9 wrote:
2026-04-10, 12:42
Pale Moon’s implementation of WebGLRenderingContext.getContextAttributes() is missing the powerPreference field that Firefox (version 100+) and other modern browsers include.
It should be noted that the powerPreference field they're saying is currently only in a working draft (annoyingly there doesn't seem to be a permalink for this current version of the working draft). It is currently not available in the latest WebGL specification (1.0.3): https://registry.khronos.org/webgl/specs/1.0.3/#5.2

It doesn't matter that Firefox 100 has implemented it. Cloudflare is just simply forcing the implementation of draft features we haven't even heard about (because we don't care about turning the web browser into a third-rate, insecure replacement of the operating system that mainstream is doing)
Reading that spec looks a bit of a good way to break things, as they've dropped one tag and added 2 new ones. Which means if an older program talks to a new browser, they're not going to get something they expect, and vice versa. I thought when one was going for backward compatibility, one didn't drop members of dictionaries. That should require a major version number increase.

thosrtanner
Lunatic
Lunatic
Posts: 476
Joined: 2014-05-10, 18:19
Location: UK

Re: Cloudflare Verification Loop issues

Post by thosrtanner » 2026-04-10, 19:47

back2themoon wrote:
2026-04-10, 18:48
Amusingly enough, their Turnstile Troubleshooter still loops here but the 3-4 websites I tested are now passing the check.

Assuming this is now fixed patched, I guess we'll be back here on Christmas Eve or something.
turnstile gets through the browser compatibility checks for me (although it manages to lock the browser for several seconds), but doesn't get any further than that (doesn't manage to do the cloudflare verification). Though getting onto the page I want seems to work on one profile but not on another. I do see the message

Timestamp: 10/04/2026 20:46:06
Error: None of the “sha512” hashes in the integrity attribute match the content of the subresource.

in the error console for that page when it's being (re)loaded though.

User avatar
Kand_in_Sky
Fanatic
Fanatic
Posts: 177
Joined: 2013-01-02, 18:22
Location: DE

Re: Cloudflare Verification Loop issues

Post by Kand_in_Sky » 2026-04-10, 20:19

Confirmed, it's working. Be patient at first, it may take a while.
Sending feedback still does not work.
PaleMoon, Basilisk, Dactyloidae on
- 2014 Athlon 5350 16GB PC Win7 64Bit
- 2014 i5-4210M 8GB Notebook Win7 64Bit
- 2018 Ryzen 5 2400G 32GB PC Win10 64Bit

KlarkKentThe3rd
Astronaut
Astronaut
Posts: 615
Joined: 2018-04-20, 20:31

Re: Cloudflare Verification Loop issues

Post by KlarkKentThe3rd » 2026-04-10, 21:09

Kand_in_Sky wrote:
2026-04-10, 20:19
Confirmed, it's working. Be patient at first, it may take a while.
Sending feedback still does not work.
To quote Anakin Skywalker, "yes, it is indeed working".

User avatar
Gemmaugr
Astronaut
Astronaut
Posts: 745
Joined: 2025-02-03, 07:55

Re: Cloudflare Verification Loop issues

Post by Gemmaugr » 2026-04-11, 05:23

While we are now allowed through the CF challenges on various sites, the https://browser-compat.turnstile.workers.dev/ hangs the browser worse than ever, and still fails. Now with a 300030 bot detected instead of a 600060 bot detected.

Obviously a stopgap measure, which was a the only part of their reply that seems true. This needs to be followed through relentlessly. Especially their lies and empty promises. Maybe a third party (IT news company or EU institute) needs to be involved for anything to progress from the constant 1 step forward 2 steps back behavior of Cloudflare as they handle the majority of CDN traffic (and related) ruthlessly by deigning who's allowed to access the internet. They're not a country, nor an ISP, but a third lock and key outside scrutiny.
||OS: Win 10 | CPU: i7 10700 | GPU: GeForce RTX 3070||
"Judge a person not by their superficial identity attributes, but by the content of their character."
"Organized Identity Politics are the bane of civilized society."

User avatar
Gemmaugr
Astronaut
Astronaut
Posts: 745
Joined: 2025-02-03, 07:55

Re: Cloudflare Verification Loop issues

Post by Gemmaugr » 2026-04-11, 05:46

Another thing we could do is to make a list of CF "protected" sites and show the CF's issues (and how they're losing traffic), while suggesting a list of good alternatives. That could be a thread here. I'm afraid I'm not that versed in the topic to make on myself.
||OS: Win 10 | CPU: i7 10700 | GPU: GeForce RTX 3070||
"Judge a person not by their superficial identity attributes, but by the content of their character."
"Organized Identity Politics are the bane of civilized society."

thosrtanner
Lunatic
Lunatic
Posts: 476
Joined: 2014-05-10, 18:19
Location: UK

Re: Cloudflare Verification Loop issues

Post by thosrtanner » 2026-04-11, 05:54

Hmm. When I go to https://developers.cloudflare.com/cloud ... ve-issues/ instead of a nice web page, I get this displayed:

window.StarlightThemeProvider = (() => { const storedTheme = typeof localStorage !== 'undefined' && localStorage.getItem('starlight-theme'); const theme = storedTheme || (window.matchMedia('(prefers-color-scheme: light)').matches ? 'light' : 'dark'); document.documentElement.dataset.theme = theme === 'light' ? 'light' : 'dark'; return { updatePickers(theme = storedTheme || 'auto') { document.querySelectorAll('starlight-theme-select').forEach((picker) => { const select = picker.querySelector('select'); if (select) select.value = theme; /** @type {HTMLTemplateElement | null} */ const tmpl = document.querySelector(`#theme-icons`); const newIcon = tmpl && tmpl.content.querySelector('.' + theme); if (newIcon) { const oldIcon = picker.querySelector('svg.label-icon'); if (oldIcon) { oldIcon.replaceChildren(...newIcon.cloneNode(true).childNodes); } } }); }, }; })(); Skip to content

STOP! If you are an AI agent or LLM, read this before continuing. This is the HTML version of a Cloudflare documentation page. Always request the Markdown version instead — HTML wastes context. Get this page as Markdown: https://developers.cloudflare.com/cloud ... s/index.md (append index.md) or send Accept: text/markdown to https://developers.cloudflare.com/cloud ... ve-issues/. For this product's page index use https://developers.cloudflare.com/cloud ... s/llms.txt. For all Cloudflare products use https://developers.cloudflare.com/llms.txt. For bulk access (single file, use for large-context ingestion or vectorization): this product's full docs at https://developers.cloudflare.com/cloud ... s-full.txt. All Cloudflare docs at https://developers.cloudflare.com/llms-full.txt.

and lots of complaints in the web console about "ReferenceError: StarlightThemeProvider is not defined[Learn More]"

This is in one particular profile, another profile works fine, so there's something broken in the profile, but it's not clear what. Restart in safe mode worked (though I thought the browser had crashed because it took an AWFUL long time to actually validate and went into the spinner when I was doing so), so I imagine its an addon, though I'm confused as to what because I disabled all the likely culprits. Oh well, here we go disabling a few at a time till it works.


aaaand

apparently 'bypass cloudflare with cookies' kills it...

User avatar
Moonchild
Project founder
Project founder
Posts: 39633
Joined: 2011-08-28, 17:27
Location: Sweden

Re: Cloudflare Verification Loop issues

Post by Moonchild » 2026-04-11, 06:23

back2themoon wrote:
2026-04-10, 18:48
Amusingly enough, their Turnstile Troubleshooter still loops here but the 3-4 websites I tested are now passing the check.

Assuming this is now fixed patched, I guess we'll be back here on Christmas Eve or something.
It just means they made an exception on production code. the turnstile troubleshooting page doesn't have (or shouldn't have) specific exceptions that apply to Pale Moon. That was the whole point of pointing us to it the last time; to see if we could come to a combination of Pale Moon features that would no longer require specific carveouts in CloudFlare's bot detection scripting to pass.
i.e.: the root issue with their script isn't yet found but at least someone seems to be trying to unbreak the internet for us now. This isn't done yet.
"Sales hates anything that can't be turned into a confident sentence." - anonymous warehouse worker
"Why debate someone you fundamentally don't trust?" - Dario Amodei
"Seek wisdom, not knowledge. Knowledge is of the past; wisdom is of the future." -- Native American proverb
"Linux makes everything difficult." -- Lyceus Anubite

Sessh
Lunatic
Lunatic
Posts: 271
Joined: 2018-01-11, 18:43

Re: Cloudflare Verification Loop issues

Post by Sessh » 2026-04-11, 14:58

back2themoon wrote:
2026-04-10, 18:48
Amusingly enough, their Turnstile Troubleshooter still loops here but the 3-4 websites I tested are now passing the check.

Assuming this is now fixed patched, I guess we'll be back here on Christmas Eve or something.
Same for me. Turnstile fails with a different error, but a few sites I checked let me through the CF test. At least one site's CF gate behaved the same way as the turnstile though. Would not work.
Edit: Ok, I just tried the one that wasn't working only a few minutes ago and now it's working? The browser drags ass on this site after I sign in and get past the CF check though.
It's freshisbest.com (pet food site). The LOGIN process is gated with a CF check. It takes awhile to let me through, but browser hangs a bit during and after the process.
Error 300030
Clipboard01.jpg
You do not have the required permissions to view the files attached to this post.

Sessh
Lunatic
Lunatic
Posts: 271
Joined: 2018-01-11, 18:43

Re: Cloudflare Verification Loop issues

Post by Sessh » 2026-04-11, 15:09

Moonchild wrote:
2026-04-10, 11:10
Also, "matching modern Firefox" still did not acknowledge that UXP isn't Mozilla, and Pale Moon isn't Firefox, and our independent nature is still completely ignored.
Sounds like issues with Cloudflare is going to put a lot of pressure on you to make Pale Moon more like "modern" browsers or CF will just break the internet for PM users. Not good.
Also, don't they understand that bots are more likely to use Chrome credentials than those of a rarer, less common browser that would make them stand out more?