airtower-luna / referer-mod

Web Extension to modify the Referer header in HTTP requests
https://addons.mozilla.org/en-US/firefox/addon/referer-modifier/
GNU General Public License v3.0
43 stars 13 forks source link

How exactly do you bypass Cloudflare? #111

Open MagicalDrizzle opened 10 months ago

MagicalDrizzle commented 10 months ago

This particular screen: cloud I know it's because of referrers because disabling this extension immediately resolved the issue. I have tried these rules but it doesn't seem to work...(both Keep and Target) cl

airtower-luna commented 10 months ago

Can you check exactly which request fails? The easiest way to do that is probably the network tab in the developer tools.

The rules shown in your screenshot will (in order):

But without seeing the request that fails I can't say if those are actually the rules you need.

airtower-luna commented 10 months ago

One addition: The only website using that Cloudflare "challenge" thing that I use is gitlab.com, so I checked how it loads there. There the gitlab.com page loads an iframe from challenges.cloudflare.com (works fine with Referer removed, which is my default setting for requests to other domains), and that frame then makes a few more requests to challenges.cloudflare.com (so the same domain rule applies). I have set "prune" for same-domain requests, and with that setting it works.

If you have a more restrictive setting for same-domain requests you might want to add a rule for challenges.cloudflare.com to challenges.cloudflare.com requests and set that to "prune" (or "keep").

But it's also possible that forum site uses Cloudflare differently than GitLab, in case of doubt it's best to look at the actual requests and see where there's an odd failure.