Cloudflare loop with whitelist mode

[meichengg]

Is there an existing issue for this?

• I have searched the existing issues

Describe the bug

I'm having infinite loop when accessing webpages using Cloudflare as WAF such as gitlab.com and jetbra.in, it keeps reloading after 5 seconds, the only way to fix this problem is to turn off whitelist mode in the settings (it also disables the extension itself 🤦🏻 ).

Steps to reproduce

1. Go to https://gitlab.com/users/sign_in or https://jetbra.in/.
2. The loop starts.
3. Turn off whitelist mode in the extension settings.
4. Reload those webpages, it will pass.

Browser

Chrome

Extension version

No response

Anything else?

No response

[tarampampam]

Hi @meichengg! I can't reproduce described behavior... For example, https://jetbra.in/ opens without the loop (chrome 101, linux):

[meichengg]

I'm using Chrome 102.0.5005.61 (macOS Monterey) by the way, sorry for the missing info.

[tarampampam]

Ok, I will check on mac a little bit later, ok?

[meichengg]

I think you should check this out and you can try with animedao.com.

https://support.mozilla.org/kn/questions/1347179

and this too

https://www.ghacks.net/2022/05/05/fix-pale-moon-browser-not-passing-cloudflares-checking-your-browser-verification/

[meichengg]

I also checked on Windows, i think Cloudflare checks if the user agent is valid, in this case it's kinda wrong so the user gets the loop.

[tarampampam]

Are you sure you don't have any other installed extensions that might be interfering with the site's functionality? Could you disable all of them for a test?

[meichengg]

Yes, i turned all the other extensions off, the only left was this extension. I retested with those websites i mentioned above and all give me infinite loop but only one was working.

loop:
Mozilla/5.0 (X11; U; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4861.82 Safari/537.36
Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4852.142 Safari/537.36

working:
Mozilla/5.0 (Macintosh; Intel Mac OS X 11_13) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4859.209 Safari/537.36

[fakhamatia]

I have the same problem
What do you need me to share?

[tarampampam]

Buddies, I have reproduced described behavior, but haven't any idea (right now) how to fix this issue, except the disabling replacing on the domain while checking is not passed. Sorry for that :(

[meichengg]

Buddies, I have reproduced described behavior, but haven't any idea (right now) how to fix this issue, except the disabling replacing on the domain while checking is not passed. Sorry for that :(

its okay, you did great, we will find other workarounds, thanks anyway

[TheGITofTeo997]

Hello, I just wanted to report that I am facing the same issue even with other user agent spoof extensions.
It looks like there is some issue when cloudflare serves the challenge and verifies your agent.

I've also tried to whitelist some domains:

• cloudflare.com
• hcaptcha.com
• challenges.cloudflare.com
• a.nel.cloudflare.com
• cf-assets.hcaptcha.com

Unfortunately this does not solve the issue.
The challenge will pass only if you get a user agent coherent with your real one, e.g. if you are using Mozilla like me, every Firefox user agent on every platform will work, but if you attempt to set a Chrome one for example, you get the loop.

The only workaround to this, unfortunately, is to blacklist even the target domain you are trying to access behind the challenge.
I hope this is achievable in some way and that this is useful info.

[meichengg]

I can confirm that i'm using the Chrome on macOS and the only option that i choose is Chrome for macOS which i still get the loop.

[meichengg]

@tarampampam , i found the root cause of this problem, check this out.

https://www.zenrows.com/blog/bypass-cloudflare#cloudflare-active-bot-detection-techniques:~:text=In%20the%20context,live%20demo.

[tx46]

Same problem here.

[Auzhie14]

How to overcome cloudflare verification?? Can not enter

[yozachar]

I had to pause the agent temporarily :(

[tarampampam]

I'm working on a new major version of the extension. Please, be patient, I'll do everything that I can to resolve this issue in a new version, I promise

[tarampampam]

I have great news - the Cloudflare infinite loop appears to be fixed in the new version (v4)! More details can be found here: #572

If anyone can help with testing, links to the alpha build can be found using the link above. Your assistance will be greatly appreciated!

[tarampampam]

I'm closing this issue because the described problem seems to be fixed in the new version, which was released recently (here is the link). Feel free to reopen it or ping me if it still brings any problems. Thank you for reporting the issue and for your attention to this project! 👍🏿

[adriadam10]

i have the chrome extension 4.0.1 version and chatgpt.com has the cloudflare loop again

[tarampampam]

i have the chrome extension 4.0.1 version and chatgpt.com has the cloudflare loop again

Could you record a short video to show how it looks on your side?

[adriadam10]

i have the chrome extension 4.0.1 version and chatgpt.com has the cloudflare loop again

Could you record a short video to show how it looks on your side?

github.mp4

[tarampampam]

Thank you! Could you also try the latest version (4.0.2) and, if possible, share screenshots of your settings? I'm asking because I just tested it, and the captcha challenge passed successfully without repeating (in other words, I can't reproduce the issue)

[adriadam10]

Thank you! Could you also try the latest version (4.0.2) and, if possible, share screenshots of your settings? I'm asking because I just tested it, and the captcha challenge passed successfully without repeating (in other words, I can't reproduce the issue)

same happens with last version and default settings

[tarampampam]

Unfortunately, I'm still not able to reproduce:

Screencast.2024-05-17.17.27.47.mp4

[gnz1123]

Version 4.0.2 cannot pass Cloudflare's CAPTCHA verification.

[meichengg]

@adriadam10 @gnz1123 Are you guys using any VPN service?

[adriadam10]

@adriadam10 @gnz1123 Are you guys using any VPN service?

not my case