What is the name of the domain?
shop.somthing
What is the issue you’re encountering
setting of paranoya level changes several seconds after the page loads
What steps have you taken to resolve the issue?
Hey everyone,
I’ve been struggling with uploading images via Ajax and kept getting many false positives. After some digging, I realized the issue was related to OWASP settings. Initially, the security level was visibly set to PL4.
To troubleshoot, I decided to lower the security level to PL2, hoping it would help. But that’s when things got messy—errors started popping up everywhere, and I faced tons of blocking issues.
Trying to fix things, I switched back to PL4, but the situation only got worse. I thought maybe I hadn’t saved my previous change, so I went back to PL2 and saved it again. After running more tests, I realized I was stuck and decided to lower it further to PL1 until I could find a proper solution.
Here’s where things got confusing: the settings page showed it was still on PL4, even though I had selected PL2. After refreshing the page with Ctrl+F5, the settings stabilized and correctly displayed PL2.
However, when I go to that page again later on, it loads PL2 but few seconds later, it automatically jumped back to PL4 in front of my eyes.
This led me to accidentally set the security level higher than I intended.
In the end, I set it to PL1, and magically, all images uploaded without any issues. Just to experiment, I tried going back to PL2, and once again, no images would load, and I even got blocked from making further requests.
At PL1, everything works smoothly. Before, when it mistakenly appeared to be at PL4, I had around 50% of the uploads failing.
Now at PL1, it’s 100% smooth. I can’t quite wrap my head around why PL4 caused so many issues, but at least PL1 is keeping everything functional for now.
I can not reproduce the 50% errors. Which makes me believe it might be different to any client.
Has anyone experienced something similar or have any ideas about why this happens?
Thanks!
Was the site working with SSL prior to adding it to Cloudflare?
Yes
What is the current SSL/TLS setting?
Full