Our plan supports Bot Management and we use it to block known bots from crawling certain URLs. Ideally, though, we’d pass Cloudflare’s bot score (eg.
cf.bot_management.score) as a header, which would be sent to origin so the server can decide how to handle it.
Does anyone know if this is possible? I’ve tried adding it as a worker, but
event.request.cf) doesn’t seem to have these fields, and when I play with firewall rules my only choices are to block/challenge the requests.
My use case here is that I want to allow good bots through so they can render an HTML preview (eg. Twitterbot fetching a URL and showing its text/image) but to avoid the bot triggering some application-specific code which only humans should execute.