I think there is something wrong with cloudflare svelte adapter. It worked for deploying and but do

I think there is something wrong with cloudflare svelte adapter.
It worked for deploying and but doesn't work for local host. Do I have to change back and forth for local and devlopment?

Ssithu I think there is something wrong with cloudflare svelte adapter. It worked for ...

Hard@Work•2/7/25, 9:46 AM

What isn't working?

sithuOP•2/7/25, 9:47 AM

Yes, I have to change between these:

import adapter from "@sveltejs/adapter-auto";
import adapter from "@sveltejs/adapter-cloudflare";

import adapter from "@sveltejs/adapter-auto";
import adapter from "@sveltejs/adapter-cloudflare";

sithuOP•2/7/25, 9:48 AM

If I am on localhost, I comment the cloudflare one and uncomment the auto

Erisa•2/7/25, 10:27 AM

they have a "managed list" for VPN IP addresses, but it requires an enterprise add-on to use for whatever reason https://developers.cloudflare.com/waf/tools/lists/managed-lists/
so if you mean for free, no they dont

Nnwdles I'm using Managed Lists in a Transform Rule on an Enterprise plan but getting th...

Erisa•2/7/25, 11:18 AM

that error indicates your account/zone doesnt have access to the list, notably its an enterprise addon, not something that comes with enterprise itself
you should speak with your account team (ask support if you dont know who they are) to get that addon enabled and discuss any cost impact

Erisa•2/7/25, 11:19 AM

if youre on a comped plan like startup or galilleo then speak to support

Erisa•2/7/25, 11:19 AM

just for avoidance of doubt, I tried the same expression

(ip.src in $cf.vpn)

(ip.src in $cf.vpn)

on my enterprise account that has the addon and it worked without issue

Erisa•2/7/25, 11:26 AM

yep for sure, no prob

Goku•2/7/25, 1:55 PM

help me

Goku•2/7/25, 1:58 PM

SuperHelpflare•2/7/25, 1:59 PM

If you're having trouble passing Cloudflare Turnstile challenges, you can try taking the following steps:

Check your browser and use a different one if necessary. Cloudflare Turnstile supports the latest versions of popular browsers but some forks (such as Pale Moon) are not supported. See this link for more info: https://developers.cloudflare.com/fundamentals/get-started/concepts/cloudflare-challenges/#supported-browsers
Disable your browser extensions. Sometimes browser extensions can cause Turnstile to block your browser.
Scan your computer for malware (for example, using a free tool such as Malwarebytes). Sometimes malware can cause Cloudflare Turnstile to detect your computer as malicious and block it.

Original message was deleted

Isaac McFadyen•2/7/25, 2:03 PM

Was about to post that :lul:

Isaac McFadyen•2/7/25, 2:03 PM

I made some edits and also added an alias so both ?turnstile-issues and ?managed-challenges now point to it.

Isaac McFadyen•2/7/25, 2:03 PM

?managed-challenges

SuperHelpflare•2/7/25, 2:03 PM

If you're having trouble passing Cloudflare Turnstile or Managed Challenges, you can try taking the following steps:

Check your browser and use a different one if necessary. Cloudflare challenges support the latest versions of popular browsers but some forks (such as Pale Moon) are not supported. See this link for more info: https://developers.cloudflare.com/fundamentals/get-started/concepts/cloudflare-challenges/#supported-browsers
Disable your browser extensions. Sometimes browser extensions can cause Cloudflare challenges to block your browser.
Scan your computer for malware (for example, using a free tool such as Malwarebytes). Sometimes malware can cause Cloudflare challenges to detect your computer as malicious and block it.

Original message was deleted

Isaac McFadyen•2/7/25, 2:57 PM

If you're not having issues with challenges then you don't really need to worry.

Isaac McFadyen•2/7/25, 2:58 PM

The reason non-mainstream browsers have issues is that they're often based on old forks (i.e. Pale Moon) or intentionally exhibit odd behavior for "privacy" reasons.

Isaac McFadyen•2/7/25, 2:58 PM

More often then not though, using a non-mainstream browser is just opening yourself up to security issues because they're not audited as well as the big projects like Chromium or Firefox.

Original message was deleted

Isaac McFadyen•2/7/25, 3:00 PM

Yeah and that's part of the issue. Those engines are built by huge companies that pay literally tens of thousands if you find a security issue in them. It takes a ton of effort to build a browser and any "brand new" browsers that are built from the ground up are likely full of security holes that just haven't been caught.

Isaac McFadyen•2/7/25, 3:01 PM

Often people argue "but Chromium has so many CVEs!" but the reason for that is that there's so much testing and fuzzing that those CVEs are all caught really quickly.

Isaac McFadyen•2/7/25, 3:01 PM

In contrast, not having any CVEs doesn't mean a project is more secure but that they just haven't been found.

Isaac McFadyen•2/7/25, 3:03 PM

For reference these are the Chromium bug bounties, up to $250k: https://bughunters.google.com/about/rules/chrome-friends/5745167867576320/chrome-vulnerability-reward-program-rules

Chrome Vulnerability Reward Program Rules | Google Bug Hunters

ATTENTION As of 4 February 2024, Chromium has migrated to a new issue tracker, please report security bugs to the new issue tracker using this form . Please see the Chrome VRP News and FAQ page for more updates and information. The Chrome...

Original message was deleted

Isaac McFadyen•2/7/25, 3:03 PM

True, but at the same time, starting a new engine at this point is kinda just asking for trouble as there's so much that goes into a browser engine.

Isaac McFadyen•2/7/25, 3:03 PM

See, for example, Servo (the Rust engine) that's been under development for years and still isn't nearing feature parody with Chromium or Gecko.

Original message was deleted

Isaac McFadyen•2/7/25, 3:05 PM

Ladybird's been in development since 2018 (https://ladybird.org/posts/fork/) and I wouldn't be surprised if it's quite easy to find things still unsupported.

Ladybird forks from SerenityOS

Announcing the split, and what it means for both projects.

Original message was deleted

Isaac McFadyen•2/7/25, 3:45 PM

Sure, but I wouldn't daily drive it quite yet

IIsaac McFadyen For reference these are the Chromium bug bounties, up to $250k: https://bughunte...

valkyrie_pilot•2/7/25, 5:29 PM

also iirc webkit is even higher

Tthedude greetings community; could someone point me to the docs if any on azure Cloudfla...

Isaac McFadyen•2/7/25, 5:34 PM

bit confused on what you mean?

oof2win2•2/7/25, 5:39 PM

hey there, i keep getting 520/522 from my supabase instance which has cloudflare as dns - what does this mean?

iamromulan•2/7/25, 11:15 PM

Hey all. Question about WARP+
For WARP=plus to be true (Warp+ key is used) does MASQUE have to be used?
I used wgcf to generate a wireguard conf but warp=on not plus.

Trying to utilize it on OpenWRT. Too bad the warp client isn't open source or I'd compile it.

Iiamromulan Hey all. Question about WARP+ For WARP=plus to be true (Warp+ key is used) does ...

playaz44•2/7/25, 11:40 PM

You can run warp directly on your router via cli (in most cases)

iamromulan•2/7/25, 11:42 PM

Official CLI?
wgcf unfortunately is unofficial

VeriHappy•2/8/25, 4:08 AM

Dean•2/8/25, 9:16 AM

anyone else seeing zaraz issues? seeing random Invalid Zaraz parameters (url) across different pages randomly

duonghung•2/8/25, 9:27 AM

Hello everyone, has anyone ever Embed a client certificate in a React native app?

WTDawson9•2/8/25, 9:41 AM

I think Cloudflare blocked its self lol
I tried using the Observatory thing and nothing is set up on my actual site to reject any traffic so it has to be Cloudflare