we are using this third party cloud-app https://app.getonecart.com / Cloudflare is preventing the app from connecting to our website. We have tried configuring Cloudflare to allow this URL to pass through, to no success. How may we set up Cloudflare such that this app is let through?
What steps have you taken to resolve the issue?
Created rule to allow https://app.getonecart.com. But still not working.
Note: We face this issue when enable under attack mode.
Was the site working with SSL prior to adding it to Cloudflare?
Your hostname check won’t work since its checking the hostname of your site being requested, not the hostname of the requester. You should allow based on IP address and/or user agent. Note that user agent is a weaker check since it can be spoofed, IP check is preferred.