https://developers.cloudflare.com/turnstile/get-started/client-side-rendering/#widget-size
Cloudflare Docs
You can initialize and customize the Turnstile widget on your web page via implicit or explicit rendering.
BUsing
data-size
블Oh my god! Great, I’ve resolved this. Thanks a lot!
But I remember this 'Flexible' option wasn't available before. When was this optional attribute added?
:NotLikeThis:
But I remember this 'Flexible' option wasn't available before. When was this optional attribute added?
:NotLikeThis:
Swhy is turnstile constantly failing with devtools open
Sand sometimes glitching by itself in a verifying-error loop non-stop
S
FOops, that was already answered
FMay or may not be related to your problem, but it'll sometimes fail for me from an extension triggering a breakpoint on my browser. Does the problem persist with extensions disabled?
FWhat does the non-interactive version even do lol
FIt let me spam the hell out of my login form without a single rejection
FAt least interactive mode seems to do its job
https://i.gyazo.com/8e5cb93d9206391180e69c4636fea601.mp4
https://i.gyazo.com/8e5cb93d9206391180e69c4636fea601.mp4
SYes it's triggering breakpoint in debugger , but when you continue and click it normally it fails , my problem is total whack it just keeps looping erroring and then verifying and then error
FThat's odd
SI love the black pointer , how can you see it in dark apps
FThat's just how gyazo renders it, it doesn't actually look like that
SWill upload a vid of that whacky turnstile glitch I couldn't find the cause , other than that , in waf challenge, if you leave the page long enough
Sa bluecheckbox will appear
Sinstead of the original turnstile
SWhich is even more weird
Estops bots with as many heuristics it can get without interaction, since youre a real user using a real web browser it will let you pass several times. for the best protection i'd recommend managed mode
S
Swhy after some inactivity time on any waf managed website the turnstile turns blue
Swhy does it still appear
SSthought so too , sadge
Sfor me it appears after 5 mins of inactivity
Sit bugs out
Ssometimes turnstile is crazy too , it gives me a non-stop loop of error-verifiying
Smonkey patching for the root bug
FMakes sense
FI need to implement my own rate limit service anyway
Eyes, rate limits are always good
くI want to block the avoidance of 2captcha, but even if I specify remote ip, it is still possible to pass through.
Is there an alternative way to do this?
Is there an alternative way to do this?
くEven if you enter a string that is not an IP address in remoteip, it will still go through.
く
くThe documentation says that it has not been rigorously tested, but I am concerned that it has not really been tested at all.
くEven if the validation is not rigorous, what validation is being done?
くThanks for the advice. It worked perfectly
FDoesn't seem to do anything on my end, unless I'm just an idiot
SI don't think the turnstile remote IP is a good idea either , so many possibilities, what if user uses a VPN after solving for privacy
SSo many edge cases
SWhat if the user is using 4g and he changed towers that they were connected to , different IP
くIt seems like a rare case, and even if the 4G tower switches and the verification fails once, the user can simply reattempt the verification.