Cloudflare is changing text in the page (+ display html as plain text)
So i have setup a traefik middleware for my error pages and when the error page is though Cloudflare it just display the page as plain text.
I did a compare on both CF proxied and not proxied, and some text where changed inside the response body.

16 Replies
left is non proxy,
right is proxied


also to test i disabled the cache but no

adding a html response header fix the problem

but WHY does this happen ?
and is there something else than editing the CF response headers ?
(also if you ask, no in the non-proxied page i don't have any content-type and it works)
looking for more elements your
x-content-type-options
header is the cause
is there a way to remove it (other than rules) ?
if no i will stick on rules but if there is an option to remove it globally that would be perfectoh so you're not returning the content-type and you have nosniff set
that header isn't on by default, you enabled something to add it
Enabling the Managed Transform Add Security Headers (Rules -> Transform Rules -> Managed Transform -> Add Security Headers) would add it, for example
this is disabled (everything in managed is disabled)
maybe in other security things
Security > Settings

You could throw the url through trace under account https://dash.cloudflare.com/?to=/:account/trace/search and see all it hits
oh that a cool thing, let me try it
on what i see it hits the default ruleset and my test rule
(for the cache i'm in dev mode so it should not count)

you don't see this response header being returned from your origin at all?
on the trace page no
i just see the response code (200)
yea it doesn't show you headers/make an origin request
I mean if you bypass the proxy and see the request headers
when i bypass this is the response headers

and request headers (i just hidded the
:authority:
)
and if you want proxied response headers here you go
