Managed Challenge Issue - Last 24hrs
Since yesterday, POST requests that are challenged are not being routed properly leading to broken links. I think they’re redirecting to a GET not a POST after.
Rollback the change plz.
19 Replies
Hey,
Have you got a repro url or can you explain more about the issue? 👀
You're saying a challenged POST is turning into a GET to origin after passage?
Sure we have basic HTML forms our users embed on their sites. On submission they redirect.
We obviously get a lot of spam so we’re running the WAF Managed Challenge on every request.
Last week, we had users complain the redirects were going to broken URLs (happens if POST isn’t correct).
We disabled the WAF and the issue went away.
But then forms started getting spammed up the wazoo.
So we ended up rate limiting them aggressively and only doing the MC on some regions.
I’d like to turn this back on but can’t have everyone complain about broken forms.
Also rate limit form is broken but that’s another issue.
Got it. Alright thanks for the report, I'll dig into this tomorrow. Thanks for the screenshot too - what time zone is that in?
Oop, I'll get this fixed too
!remind 12h Dig into
:zep_check: I will remind you in 12 hours at Sep 1, 2025 at 13:36 UTC
I’m in Japan @Walshy | DevPlat EE
I’m around to help later if needed
Great, thanks!
Reminder for @Walshy | DevPlat EE: Dig into
Set <t:1756690587:R>
Hey @Walshy 👋
Case: 01721703 in CF SF portal.
If you could take a look that would be great. I've posted a HAR demonstrating broken form POSTs.
https://community.cloudflare.com/t/managed-challenge-set-by-waf-custom-rules-transform-post-requests-into-get-requests/833047/6
Not the only one either.
Thanks, I'll check this out too
Eng is aware of the issue, waiting for them to push a fix
@Walshy where would I be notified of the fix?
I'll post it here and on the ticket
Lovely. Thx mate!
I’m getting a lot of flack lol
So appreciate this being addressed.
Yeah sorry for the issue, I'm hoping the fix is rolled out either today or tomorrow but I'll let you know
Fix should be rolled out, let me know if you're still having issues
@Walshy the error is back.
Benjamin Dicken
A minimal, responsive and SEO-friendly Astro blog theme.