meuxbox.com.br
I activated the JS Challenge function. Then I noticed that it started blocking “favicon” I released the image URL path with WAF. The problem was solved. Then I saw that the same problem occurs with Cloudflare’s own website where the favicon icon does not display. The problem with keeping JS enabled is that in the event it always alerts you that the favicon is blocked.
Full
Cloudflare uses JS enabled, but the favicon icon does not display since it is also blocking the image URL automatically
But, if you go to WAF and release the image url as ignore JS. The favicon will start displaying in JS.
That’s expected behaviour, otherwise there’s a hole in the protection provided by the challenge. As you have done, you are free to allow it.
What you said doesn’t make sense. I get 2 warnings for the same access.
One because the icon was blocked by the JS itself.
Another because the person is passing the JS challenge.
At the point the icon is requested, the user hasn’t yet passed the challenge so you would expect the icon request to be challenged as well as the request that triggered the challenge in the first place.
This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.
