I’m using Cloudflare proxy to protect my web site including its REST APIs.
My security event list shows a managed challenge response for an OPTIONS request. What does this actually mean? An OPTIONS request is a transparent part of CORS, I don’t see how it can be intercepted in order to challenge the viewer.