[Fixed] Cloudflare turnstile challenges being blocked even though I have set cloudflare to TRUSTED

[MMAA]

Hi!

Sometime around this week, cloudflare challenges seemed to stop working for me when NoScript is enabled. I just get stuck in the "Verifying you are human. This may take a few seconds." screen indefinitely.
A spinning loader appears and disappears, but the automatic captcha box just never appears until I disable the extension altogether and reload the page.

I've had cloudflare set to TRUSTED in my settings for a long while and that used to work fine until now, and I can't recall changing any significant setting recently.

I also have set the top domains I'm trying to access as trusted individually, in the CUSTOM checkbox (steamdb.info is one of the pages I'm suddenly unable to access, if you need an example).
Also tried setting cloudflareinsights.com and challenges.cloudflare.com to TRUSTED, to no avail.
No other domains are shown in the extension's popup list.
I don't have any XSS blocks set for any cloudflare domains either.

Even though cloudflare.com is TRUSTED, the browser console says NoScript blocket a GET from

Code: Select all

https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/ (...)

This is happening both on Firefox 145.0.2 (on Windows x64) and Firefox Nightly 147.0a1 (on Android AArch64).

[jais]

Can confirm, this is also happening on Firefox 145.0.2 (aarch64) with NoScript Version 13.5.

It's also blocking Google Recaptcha... with the domains whitelisted as usual.

The irony, I had to disable ALL NoScript restrictions to even sign up for this forum to post this.

If the extension is making half of the internet unusable there is no choice but uninstall the extension...

[ma1]

It's also blocking Google Recaptcha... with the domains whitelisted as usual.

I am posting this message as a guest (like MMAA above), therefore passing this Google Recaptcha (which does load normally for me).

Does it keep happening for you also in NoScript 13.5.1.1984 (brand new Tor-hosted stable version, meant to skip the long waiting queues on AMO)?

@MMAA, could you provide me with an URL of a page with broken turnstile?

Thank you both!

[guest_user]

Not one of the posters above, but I've been having trouble with reCaptcha and NoScript for a few days as well. Example link is my energy provider's login page - https://myppc.ppcenergy.ro/#!Login
With NoScript enabled, the placeholder for reCaptcha is there, but not showing, with NoScript disabled the reCaptcha element is shown. Some screen grabs - https://imgur.com/a/wcMfrID

Funny thing is even is page is not rendering properly for me, and I have to completely disable NoScript to get the captcha.

[barbaz]

(steamdb.info is one of the pages I'm suddenly unable to access, if you need an example).

on https://steamdb.info/ I was not required to pass any turnstile challenge nor CAPTCHA to access it. And I am able to pass the turnstile challenge at https://techblog.willshouse.com/2012/01 ... er-agents/ with NoScript enabled. I'm using NoScript 13.5.0.902.

How have you configured your TRUSTED preset? (NoScript Options > General, TRUSTED tab)

[Giorgio Maone]

Most likely this bug - fixed in latest builds.

[MMAA]

Yup, seems to be working perfectly again now. Thanks a lot!