search

privacypass / challenge-bypass-extension

DEPRECATED - Client for Privacy Pass protocol providing unlinkable cryptographic tokens
https://privacypass.github.io
BSD 3-Clause "New" or "Revised" License
1.24k stars 192 forks source link

Cloudflare Passes completely broken #291

Closed RealDolos closed 2 years ago

RealDolos commented 2 years ago

The reason for this seems simple: you (cloudflare) rolled out a new version of the captcha challenge that broke your (privacy pass) extension.

E.g. the extension looks for POSTs with __cf_chl_captcha_tk__' or '__cf_chl_managed_tk__ to detect a challenge submission (see). But requests with these parameters do not exist anymore. The closest is __cf_chl_rt_tk, but that one isn't even used in the POST itself, it's just pushed onto the browser history when that challenge js is loaded and replaced again afterwards. The final submission POST cannot be detected that way, and the extension will therefore never even attempt to do an issuance.

Tested broken: Firefox and Chrome (no surprise), extension version 3.0.0

ppopth commented 2 years ago

Thank you so much. We are working on it.

ppopth commented 2 years ago

292 for tracking

mendelsphotography commented 2 years ago

By me had the same issue but seemed to be by me it screwed up the CSS but if used in Incognito it was fine and as soon I disabled the extension (privacy pass) soo don't know if that's related also or just me

ppopth commented 2 years ago

This has been resolved in v3.0.1