Cloudflare Developers•3y ago

That rule looks like it's detecting JavaScript, which shouldn't be present in YAML.

IIsaac McFadyen That rule looks like it's detecting JavaScript, which shouldn't be present in YA...

Frerduro•9/24/23, 4:54 PM

looking at the file now I dont see javascript its just mythicmobs code

Isaac McFadyenOP•9/24/23, 4:55 PM

Hmm interesting. Possibly a false detection then?

Frerduro•9/24/23, 4:56 PM

I dont want to completly disable XSS detection through

Isaac McFadyenOP•9/24/23, 4:56 PM

Yeah. If you're on a non-Free plan you might be able to tune the sensitivity of that detection? Or bypass the user manually, but if it happens again that might get tedious.

Frerduro•9/24/23, 4:57 PM

its flagging me when I try to save the file

fmorenoadmin•9/24/23, 4:58 PM

HELP. When I make a POST with JQuery, it gives me the following page as a response:
Please wait while your request is being verified...

Frerduro•9/24/23, 4:58 PM

I can setup a waf skip rule but it will skip ALL managed rules not a specific one

Original message was deleted

Frerduro•9/24/23, 4:58 PM

no it doesn't

Frerduro•9/24/23, 4:59 PM

oh sorry mis read what you said

Original message was deleted

Isaac McFadyenOP•9/24/23, 4:59 PM

If it was Free it would say "Free Managed Ruleset"

Isaac McFadyenOP•9/24/23, 4:59 PM

But yeah probably not lul

Frerduro•9/24/23, 5:01 PM

kinda sucks you can't make a skip rule to only skip a specific managed rule

Frerduro•9/24/23, 5:02 PM

yea I can

Bjarn•9/24/23, 8:57 PM

Hey! Is it me or are network and 5xx related issues really common lately? Its happening quite a lot I think, Cloudflare used to be more stable I remember.

re: #cloudflare-status

Bjarn•9/24/23, 9:56 PM

Yup saw it, I notice it mainly because of the performance notifications from monitoring, huge spikes periods of slower averages and they reflect the incidents on the status page indeed

Bjarn•9/24/23, 9:57 PM

And sometimes 520s today, but that’s also part of the ongoing inc indeed

Wakacau•9/25/23, 3:09 AM

hello, anybody know how many days CF trust and safety review abuse report since we clicked request review? i have domain that marked false report as phishing and also affected with our subdomain

WWakacau hello, anybody know how many days CF trust and safety review abuse report since ...

Erisa•9/25/23, 7:00 AM

Nobody in this community or on the Support team can help with answers to Trust and Safety related questions. Please direct your question to

abusereply@cloudflare.com

abusereply@cloudflare.com

EErisa Nobody in this community or on the Support team can help with answers to Trust a...

Wakacau•9/25/23, 9:12 AM

i've also contacted that email since friday but no reply until now

Erisa•9/25/23, 9:13 AM

Sorry to hear that, unfortunately there is no way in which anyone here can assist

Wakacau•9/25/23, 10:22 AM

thanks for the information anways

kanshan•9/25/23, 11:05 AM

Anyone get Constellation access?

Abhinav Saraswat•9/25/23, 11:11 AM

Hi everyone,
I'm facing an issue with the cloudflare CDN. I'm using workers to update the response by adding some headers. But somehow the last-modified value in the response through CDN is coming different from the original response if we access without CDN. Is it due to cloudflare caching?

Erisa•9/25/23, 1:43 PM

yes those dates should change when the certificate renews

Erisa•9/25/23, 1:43 PM

they will renew sometime before that date, usually a few weeks before

fernvenue•9/25/23, 2:12 PM

https://github.com/cloudflare/cloudflared/issues/389

GitHub

arm64 build for macOS · Issue #389 · cloudflare/cloudflared

Is there something stopping this project to release arm64 build for macOS?

fernvenue•9/25/23, 2:12 PM

Just found this, is there any reason that Cloudflare team doesn't provide cloudflared's arm64 build for macOS?

Ffernvenue Just found this, is there any reason that Cloudflare team doesn't provide cloudf...

Hello, I’m Allie!•9/25/23, 2:23 PM

Weird... I'm running Mac Arm, and I have a working

cloudflared

cloudflared

binary. Let me see if I can track down where I got it from...

Ffernvenue https://github.com/cloudflare/cloudflared/issues/389

Isaac McFadyenOP•9/25/23, 2:23 PM

They do, it seems.

Screenshot_2023-09-25_at_10.23.11_AM.png

Isaac McFadyenOP•9/25/23, 2:23 PM

Just not a direct download. But the homebrew version is arm64.

Hello, I’m Allie!•9/25/23, 2:23 PM

Oh yeah, homebrew

BBjarn Hey! Is it me or are network and 5xx related issues really common lately? Its ha...

Bjarn•9/25/23, 2:25 PM

re this: R2 uploads are failing frequently with 502's.

I'm a big fan of CF, but I have to confess these issues are getting quite frustrating tbh... over the last 2 months, all downtime of my services are directly caused by CF.

IIsaac McFadyen Just not a direct download. But the homebrew version is arm64.

fernvenue•9/25/23, 2:26 PM

Ah, I see, thanks. By the way, I think it should also available in GitHub releases? A little bit misleading actually.

fernvenue•9/25/23, 2:27 PM

Seems some users thought there is no arm64 support for macOS.

Ffernvenue Ah, I see, thanks. By the way, I think it should also available in GitHub releas...

Isaac McFadyenOP•9/25/23, 2:29 PM

If you scroll down on that issue they do mention (around halfway down I think) that it works via homebrew, but it seems some users don't want to install globally via homebrew and so would like a binary too, which is completely understandable.

IIsaac McFadyen If you scroll down on that issue they do mention (around halfway down I think) t...

fernvenue•9/25/23, 2:30 PM

Yea.

RRaindrops Up, so my message doesn't get lost 😭 I really want to know why my workers cert...

Chaika•9/25/23, 2:56 PM

It doesn't matter if it's inactive, as long as another certificate is covering it/can be used in place of it.
Do you see any cert that could match it under Edge Certs?

Euro Ali•9/25/23, 3:04 PM

Is it faster to connect to a remote MySQL server directly or via Cloudflare Tunnel?

Euro Ali•9/25/23, 3:04 PM

Has anyone tested this?

RRaindrops There is a match under Edge Certs but that cert was made with the custom domain,...

Chaika•9/25/23, 3:10 PM

Yea that is odd it thinks its inactive, but other then being a bit annoying it doesn't matter. You could delete it entirely, as long as you have your Universal enabled, the Universal would cover it/it would continue to work. The docs detail it's perfectly find to delete it if you want to use a different cert

EEuro Ali Is it faster to connect to a remote MySQL server directly or via Cloudflare Tunn...

Chaika•9/25/23, 3:10 PM

You mean from a worker, or what context?

EEuro Ali Is it faster to connect to a remote MySQL server directly or via Cloudflare Tunn...

DarkDeviL•9/25/23, 3:22 PM

The tests you could be making with your ISP's (A and B), and the tests that I could make through my ISP's (C and D) would likely be like two different worlds, where the result for you could be to use Cloudflare Tunnel, but the result for me would be run it directly (or the other way around).

Many different factors including both source and destination ISP, and how good or bad their routing (with the other end when directly, or with Cloudflare when using the Cloudflare Tunnels) would play a role here, so you're likely not going to find one definitive answer for that.

Chaika•9/25/23, 3:28 PM

There's also just 3 different ways to use tunnels:
From a worker, using the modified outdated mysql library, which does TCP over WS: Not recommended
Locally using cloudflared access (still tcp over ws I believe)
or Locally, using Private Networks with WARP

That rule looks like it's detecting JavaScript, which shouldn't be present in YAML.

Similar Threads

Similar Threads

Similar Threads