3 ms·
Are you sure they didn't fix this? I remember getting those all the time, but haven't encountered one for several months now.
by CodesInChaos 6y ago
Are you sure they didn't fix this? I remember getting those all the time, but haven't encountered one for several months now.
- kevincox 6y agoI would have to check the timeline but I was seeing this frequently with their IPFS gateway (as you can't control the security settings). It was a couple of months ago now so maybe it has been fixed recently. I'm curious, do you know how it was fixed? Is it not serving a captcha for the second request on a connection or something? Or does it somehow figure out that asset requests are "safe"?
- CodesInChaos 6y agoMy experience was with using Tor Browser to access websites using cloudflare. I'd expect it to be based on the Accept request header (and possibly the Content-Type response header to prevent bypassing it). Or perhaps even the Content-Type of past requests to that url. But I don't really understand what the purpose of these captcha checks is in the first place. Handling a captcha challenge is more expensive for the server than most GET requests. Perhaps it's done in anticipation of later POST requests (which can't be blocked transparently without breaking the functionality of the website).