Cloudflare Developers•8mo ago

Custom challenge pages

Hi, I'm trying to create a custom challenge page per https://developers.cloudflare.com/support/more-dashboard-apps/cloudflare-custom-pages/configuring-custom-pages-error-and-challenge/#step-2-select-your-custom-error-tokens This tells me to use the token ::CAPTCHA_BOX:: where the CAPTCHA will be placed. I did so, but it seems like no matter what I do, the additional text:

example.com
Checking if the site connection is secure
example.com needs to review the security of your connection before proceeding.
Ray ID: 000000000000000
Performance & security by Cloudflare

example.com
Checking if the site connection is secure
example.com needs to review the security of your connection before proceeding.
Ray ID: 000000000000000
Performance & security by Cloudflare

is displayed around the CAPTCHA box. However, I've seen other sites protected by Cloudflare that also have custom challenge pages without this, for example, Dcard.tw (basically Reddit in Taiwan). It's not any CSS or injected JS trickery, there's absolutely no mention of the phrase "Performance & security by Cloudflare" in the page source whatsoever. How are they doing this?

6 Replies

merp (Taiwan arc)OP•8mo ago

Is this an Enterprise feature? ... but then, I checked their DNS servers, and they're standard Cloudflare DNS servers, not the Foundation DNS servers that an Enterprise customer would have. I also couldn't find any mention of it in the documentation, even meant for Enterprise customers.

Erisa•8mo ago

then, I checked their DNS servers, and they're standard Cloudflare DNS servers, not the Foundation DNS servers that an Enterprise customer would have

Just to weigh in here, that's not a good or reliable indicator at all since Foundation DNS is new and optional. A huge majority of Enterprise zones are not using it. What's the name of the type of the page you're adding this under? is it "Interactive Challenge", "Managed Challenge / I'm Under Attack Mode™" or another type?

merp (Taiwan arc)OP•8mo ago

Interactive Challenge I don’t see this feature mentioned in the documentation even as an enterprise feature though Is that a thing? I didn’t even realize enterprise got its own IP ranges

Erisa•8mo ago

I can't reproduce this on a pro zone with a basic html file, are you able to share a html file that reproduces it? Actually I can reproduce it on the Preview, but then that part doesn't show when I invokve the actual challenge rule Do you see the same?

merp (Taiwan arc)OP•8mo ago

Oh wait does it show up differently between the preview and when a user actually runs into it I check ... that kind of defeats the purpose of a preview okay it is different in the actual page that is very strange thank you though

Erisa•8mo ago

I agree, I'll check with the team on why that is the case

Gaming

Programming

Custom challenge pages