search

minbrowser / min

A fast, minimal browser that protects your privacy
https://minbrowser.org/
Apache License 2.0
7.9k stars 704 forks source link

Cloudflare security check not working #2210

Open kepler-69c opened 1 year ago

kepler-69c commented 1 year ago

Expected Behavior / Actual Behavior

The Cloudflare security check does not seem to work properly on Min. When you open a website protected by this service, you are asked to fill in a captcha in an endless loop without getting access to the website.

I don't know what exactly the problem is. I am also not sure if this is my error or a browser bug. But three things point to a browser bug:

  1. my IP is not blacklisted
  2. other Min users have the same problem
  3. other browsers on the same device can access the blocked pages.

To Reproduce

Open any website protected by cloudflare (for example GitLab Sign In, OpenAI chat)

image

n0a commented 1 year ago

same problem

cora-type commented 1 year ago

still getting this issue in 2023

borpshws commented 8 months ago

Issue still exists as of Feb 2024.

Min version: 1.31.1 MacOS version: 14.2.1

borpshws commented 8 months ago

So I found a weird workaround...

Turns out that Cloudflare's security and Google's services are very picky regarding what UserAgent you have the browser set to. Neither service will accept the UA that Min uses by default, instead you can change the UA to something that will make the services happy. Here is one I found that works with MacOS:

Mozilla/5.0 (Macintosh; Intel Mac OS X 14_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Vivaldi/6.5.3206.59

The UA is based on Vivaldi and causes some website to behave a little bit strangely and lose some CSS animations. It will also cause most websites, like YouTube, to forget light/dark mode preferences. I am actively looking for better options and will update if I find any but for now here is your fix.