Cloudflare Developers•2y ago

It would be on the request.cf object

HHello, I’m Allie!It would be on the request.cf object

Lume•6/26/24, 7:41 AM

I can't see it; it might require an enterprise feature

LLume I can't see it; it might require an enterprise feature 🤷‍♂️

Hard@Work•6/26/24, 8:04 AM

Right... it appears it is a paid Enterprise Add-On

Abhishek•6/26/24, 9:03 AM

Hi,

I would like to disable the JavaScript challenge interstitial page for a specific country and for certain URLs when under attack mode is enabled. The URLs are:

/wp-json/wc/v2/flutter/wcfm-products
/wp-json/wc/v3/products

I have tried to configure this using Page Rules, but it's not working as expected. I have attached a screenshot of the current rules overview for your reference.

Could you please help me resolve this issue? Appreciate your response.

Original message was deleted

Abhishek•6/26/24, 9:39 AM

Is this correct? The image is still not loading on the Android app. When I disabled the 'under attack' mode, it works perfectly.

Original message was deleted

Abhishek•6/26/24, 9:43 AM

Is it correct?

Abhishek•6/26/24, 9:45 AM

Can you please guide me? I'm a beginner and would greatly appreciate your assistance and cooperation.

Original message was deleted

Abhishek•6/26/24, 10:05 AM

This works perfectly. Thank you so much for your kind help.

I have one more question: Someone is attacking my client's website, and I'm using the 'Under Attack' mode. Are there additional settings in the Pro version that I can use to enhance protection? I appreciate your guidance.

MyZeD•6/26/24, 1:43 PM

Is the build target directory created as ramfs or tmpfs? This could save you a lot of discs and give more performance if you have a lot of files. (don't forget noatime cloudflare

)

Original message was deleted

Isaac McFadyen•6/26/24, 7:54 PM

In the Pages dashboard, under your project -> settings -> build settings.

Isaac McFadyen•6/26/24, 7:55 PM

Actually I'm wrong. One sec.

Original message was deleted

Isaac McFadyen•6/26/24, 7:58 PM

Is it a Direct Upload project? Do you see a Builds and deployments tab under Settings?

Isaac McFadyen•6/26/24, 7:58 PM

Isaac McFadyen•6/26/24, 7:58 PM

Then you can't set a build command.

Isaac McFadyen•6/26/24, 7:58 PM

When you use Direct Upload you need to build yourself and upload built assets.

Original message was deleted

Hard@Work•6/26/24, 8:07 PM

Cloudflare just deploys what you give it in Direct Upload mode. Cloudflare doesn't build your files

Original message was deleted

Hard@Work•6/26/24, 8:21 PM

wrangler pages deploy <directory>

wrangler pages deploy <directory>

Roj [roːʒ]•6/27/24, 8:23 AM

I came here from https://developers.cloudflare.com/pages/configuration/build-caching/#feedback

Roj [roːʒ]•6/27/24, 8:23 AM

Is there a way to cache custom directories?

Roj [roːʒ]•6/27/24, 8:23 AM

In my case I want to cache ~/.cache

tadeumaia•6/27/24, 12:14 PM

Anyone using Remix + PG on Cloudflare Pages? Having trouble getting it to work with drizzle. Wrangler complains about compatibility flag for node for several node pkgs, but it's on on both the wrangler.toml and passed as --compatibility-flags="nodejs_compat" for the wrangler CLI. Running remix dev, just crash the server with an Cannot redefine property: args error.

gadolinium•6/27/24, 2:22 PM

Do i need a privacy policy if I have just a personal site with my information? I only use zaraz ang google analytics 4 with it to see how the site is used. I have all the zaraz privacy options enabled, have no ads and do not allow google to use it unless it is for technical support. I have a consent banner and analytics are disabled by default, they are opt in.

shir0fu•6/27/24, 4:02 PM

Hi, I've recently started using CF Pages and can't find information on how I can collect logs from my frontend in CF Pages. I have only found Logpush and Functions Logs or Worker Logs, but that is not what I need. Is it possible to do this?

Ttadeumaia Anyone using Remix + PG on Cloudflare Pages? Having trouble getting it to work w...

Roj [roːʒ]•6/27/24, 4:33 PM

I used to do use Remix + PG on CF Workers with node_compat. The performance sucked, and I wouldn't recommend it. Or at least you should opt in for a serverless Postgres like https://neon.tech, or maybe Durable Objects (I haven't tried them so idk how they are). Overall, I recommend using things like Google Cloud Run to deploy such apps. I'd argue that even serverless Postgres would slow your app down a lot with its cold starts.

RRoj [roːʒ]I used to do use Remix + PG on CF Workers with node_compat. The performance suck...

tadeumaia•6/27/24, 4:39 PM

Thanks for that info. I'll have to investigate the performance after I get it working. There is some KV on top of the db and it's heavily cached on the html) I'm using turso right now, but I'm looking to move to supabase to make my life easier with triggers and a good full text and vector

Original message was deleted

gadolinium•6/27/24, 5:44 PM

would something like this: https://ico.org.uk/for-organisations/advice-for-small-organisations/create-your-own-privacy-notice/ do?

Create your own privacy notice

...

TTso_osT I am using Cloudflare pages with Zero trust access, do I need to verify the JWT ...

zwily•6/27/24, 8:22 PM

In theory you shouldn’t need to… but I usually do to protect from the off-chance that ZeroTrust gets some sort of bug that allows an endpoint public access accidentally. Since I’m verifying the token from the header, I can still shut it down. If you don’t verify it but just trust the jwt contents blindly, you could be exposed. But again, this is talking about what is probably really really rare

zwily•6/27/24, 8:23 PM

Another potential scenario (and more likely) is that I screw up the ZT rules and expose an endpoint myself.

Zzwily In theory you shouldn’t need to… but I usually do to protect from the off-chance...

Chaika•6/27/24, 8:31 PM

fwiw there has been two publicily disclosed reports of being able to skip access in the past:
https://hackerone.com/reports/1478633
https://hackerone.com/reports/1575912
older now, and one can hope CF has upped their game to prevent that sort of thing further, but verifying the JWT is def recommended

FrostTaco•6/28/24, 12:04 AM

I know it's been discussed many times and there's a workaround with an extra worker(which I really don't want to do), but is there any timeline for wildcard subdomains/is it even planned at some point?

Guilherme Esdras•6/28/24, 12:38 AM

Hello guys!

I'm receiving the following error on my pages project:

"Error 1101 Ray ID: 89a99b477a8a646d • 2024-06-28 00:37:09 UTC
Worker threw exception"

Does anyone here already faced that issue?

My project was built using Nuxt 3 (with SSR on and cloudflare-pages plugin), TypeScript, Vuetify.

Guilherme Esdras•6/28/24, 12:39 AM

And is random. Sometimes it occurs, sometimes not.

Folyd•6/28/24, 9:12 PM

why changelogs of pages has no updates after 2023-09-13
https://developers.cloudflare.com/pages/platform/changelog/

Cloudflare Docs

Changelog · Cloudflare Pages docs

Updated all API messaging to be more helpful.

ZachHandley•6/28/24, 9:31 PM

Hey I'm just curious. Why can't I use externalized libraries in SSR environment and why aren't the nodejs polyfill's supported by default or via discovery? I'm really confused as to what the heck is going on in my Astro Application.

I've deployed packages to Cloudflare Pages before, but for some reason this one specifically is giving me all kinds of errors about

node:buffer

node:buffer

, and Astro recommends using the

ssr: { external: ["node:buffer"]

ssr: { external: ["node:buffer"]

-- cool. But is the solution if something imports

fs

fs

to seriously reach out to the author? Is there no better solution? Why can't I just build it with the polyfills in there?

ZachHandley•6/28/24, 9:47 PM

I just am massively confused as to why one of my fav development companies said screw you to any packages that aren't updated to the current

node:fs/whatever

node:fs/whatever

stuff.

Why wouldn't the worker just assume it's correct, and it's up to the user to distinguish what's breaking what? My editor can understand I mean

node:fs

node:fs

and build, but cloudflare can't?

ZZachHandley Hey I'm just curious. Why can't I use externalized libraries in SSR environment ...

Hello, I’m Allie!OP•6/28/24, 9:54 PM

You can? You just have to add the polyfills to whatever builds your app(in this case, Astro).

ZachHandley•6/28/24, 9:54 PM

didn't work even a little bit lol

Hello, I’m Allie!OP•6/28/24, 9:54 PM

Though note that for stuff like fs, it won't be able to emulate an actual filesystem

Hello, I’m Allie!OP•6/28/24, 9:54 PM

Since that doesn't exist on Workers

ZachHandley•6/28/24, 9:54 PM

export default defineConfig({
  site: "https://mysite.com",
  plugins: [
    tsconfigPaths(),
    nodePolyfills({
      // Specific modules that should not be polyfilled.
      exclude: [],
      // Whether to polyfill specific globals.
      globals: {
        Buffer: true, // can also be 'build', 'dev', or false
        global: true,
        process: true,
      },
      // Whether to polyfill `node:` protocol imports.
      protocolImports: true,
    }),
  ],

export default defineConfig({
  site: "https://mysite.com",
  plugins: [
    tsconfigPaths(),
    nodePolyfills({
      // Specific modules that should not be polyfilled.
      exclude: [],
      // Whether to polyfill specific globals.
      globals: {
        Buffer: true, // can also be 'build', 'dev', or false
        global: true,
        process: true,
      },
      // Whether to polyfill `node:` protocol imports.
      protocolImports: true,
    }),
  ],

ZachHandley•6/28/24, 9:55 PM

I have this

ZachHandley•6/28/24, 9:55 PM

and I just spent like

ZachHandley•6/28/24, 9:55 PM

4 gosh darn hours trying a lot of things

ZachHandley•6/28/24, 9:56 PM

my problem is

ZachHandley•6/28/24, 9:56 PM

it's mad about

fs

fs

from

appwrite

appwrite

ZachHandley•6/28/24, 9:58 PM

I included

node:fs

node:fs

, even if it emulates it it doesn't matter, I don't need or use the file system

ZachHandley•6/28/24, 9:59 PM

nor does that package in my usecase

ZachHandley•6/28/24, 9:59 PM

so essentially in the build pipeline, it's going

build -> Cloudflare -> Astro

build -> Cloudflare -> Astro

even on static pages and then Cloudflare is telling me it knows more than me on pages it has no business being a part of.

ZZachHandley so essentially in the build pipeline, it's going `build -> Cloudflare -> Astro` ...

Hello, I’m Allie!OP•6/28/24, 10:00 PM

Do you have a repo?

ZachHandley•6/28/24, 10:02 PM

Not directly, it's for a client, but it's mostly happening from

thirdweb

thirdweb

, and

appwrite

appwrite

node-appwrite

node-appwrite

, I can make a reproduction, but really it seems like if you just install something like

appwrite

appwrite

that requires

fs

fs

instead of

node:fs

node:fs

, it would fail no?

export default defineConfig({ site: "https://mysite.com", plugins: [ tsconfigPaths(), nodePolyfills({ // Specific modules that should not be polyfilled. exclude: [], // Whether to polyfill specific globals. globals: { Buffer: true, // can also be 'build', 'dev', or false global: true, process: true, }, // Whether to polyfill `node:` protocol imports. protocolImports: true, }), ],

It would be on the request.cf object

Similar Threads

Similar Threads

Similar Threads