Added cdn-cgi script on my pages


#1

Just today I noticed my web site pages had a blank/black space added to the top. I thought perhaps my site had been hacked, so I looked at my files and they were okay, but I looked at the page sources and I saw this was added:

script src="/cdn-cgi/apps/head/XnirC4GdeZN3FWn0wns3htVjXj0.js"

I am assuming CloudFlare is adding this, which I guess is fine except that it adds that annoying space on top. What is this line and how do I deal with it?


#2

I believe that path is related to Cloudflare apps. Do you have the welcome bar app installed by chance?


#3

Yes, but I haven’t touched CloudFlare in months/years! It says it was installed 15 days ago. Did CloudFlare Corp. do all this by judicial fiat or what do you think happened?


#4

We’re not opposed to doing things by fiat (such as providing universal SSL to all our legacy customers when we rolled it out or defaulting all new accounts to supporting IPv6), but in this case I asked the apps team to check the logs and it appears that you’d had the welcome app installed from our (now) legacy apps platform and we migrated it to the new apps platform on 2017-07-17T23:34:43.566Z.

Different code base for the app so that could account for the difference you’re seeing in the UI. Sorry for the inconvenience there… should be able to either uninstall the app or modify the settings to whatever might work/looks reasonable to you.


#5

OK, that makes sense and explains the “installed 15 days ago” thing. I uninstalled it. Thanks for explaining that.

But to shift the topic slightly, and this is more for your benefit - the old Welcome App must have, when nothing was inputted into the HTML code area, had no effect on a rendered page. That must have been my case, I must have enabled the Welcome app and entered nothing in (that was what I saw when I looked at it before I uninstalled it), and of course there was no effect on my pages.

But the new Welcome App seems to influence a rendering of a perhaps 20px blank/black space at the top of a page even when nothing is entered into the Welcome code. That’s why I noticed it.

Should that be the behavior? I certainly wouldn’t like that. I mean, the Welcome App would be nice to put in temporary messages, but during normal times not have anything - but I’d hate to uninstall the App just to not have anything - as it is now, as I mentioned, when no code is entered, it still influences what the pages look like.

Or am I missing something?


#6

Well it’s the behavior that is previewed currently, so I guess it wouldn’t be unexpected behavior for someone who wasn’t migrated from the old one. But I do see your point and I will pass along the feedback to the apps team. At the moment uninstalling the app is the behavior required not to have the blank bar.

For what it’s worth the welcome bar is one of the apps that has the most feature requests associated with it and I have been begging the apps team not to implement any of them. I think it’s an app type ripe for someone other than Cloudflare to come in and build a feature rich solution with:

  • Timed appearance (not before xx or after xxxx).
  • Rotating Messages
  • Rotating Links
  • Appear every nn page views
  • Allow dismissal for ever/today/x days
  • Font styling
  • css for buttons
  • rss integration
  • other value added features

For the most part the sample apps we’ve built are intended to meet the useful bar. While there are plenty of great (and legitimate) enhancement requests, we hope in the long run other app developers will step in to provide better solutions to ours.


#7

hello

i have the same thing, for like 2 weeks, i have a script on my website from cloudflare

http://www.mydomain.com/cdn-cgi/scripts/af2821b0/cloudflare-static/email-decode.min.js

this script is not cached, so my google score is low because of this only script that is not cached by cloudflare and my ISP

how can i fix this ?


#8

You can turn off Email Obfuscation in Cloudflare’s Scrape Shield tab. That’s what that script is for.


#9

wow thanks, i-ve searched the entired dashboard of cloudflare, but i`ve missed this… silly me :slight_smile:

i though it was something related with Argo function


#10

Hi,
Where I can found this in CloudFlare Dashboard?

Thank You


#11

Thanks, I found. ^_^’