The forum link in the first paragraph is a broken link. The one about Pale Moon from 2015 suggests the user did something custom and it was seen by CloudFlare

The forum link in the first paragraph is a broken link. The one about Pale Moon from 2015 suggests the user did something custom and it was seen by CloudFlare (which is acting as a WAF) as something like an SQL Injection[1]. All of the CloudFlare hate on this site is tiresome and borders on Crying Wolf. Websites aren’t forced to use it. It’s affordable and gives DDoS protection. If reducing false positives for bot/malicious traffic detection were more reliable, this would already be solved. [1] https://forum.palemoon.org/viewtopic.php?t=7096#p45805 https://forum.palemoon.org/viewtopic.php?t=7096#p45805