Page 1 of 1

[Fixed] Cloudflare turnstile challenges being blocked even though I have set cloudflare to TRUSTED

Posted: Mon Dec 01, 2025 12:22 am
by MMAA
Hi!

Sometime around this week, cloudflare challenges seemed to stop working for me when NoScript is enabled. I just get stuck in the "Verifying you are human. This may take a few seconds." screen indefinitely.
A spinning loader appears and disappears, but the automatic captcha box just never appears until I disable the extension altogether and reload the page.

I've had cloudflare set to TRUSTED in my settings for a long while and that used to work fine until now, and I can't recall changing any significant setting recently.

I also have set the top domains I'm trying to access as trusted individually, in the CUSTOM checkbox (steamdb.info is one of the pages I'm suddenly unable to access, if you need an example).
Also tried setting cloudflareinsights.com and challenges.cloudflare.com to TRUSTED, to no avail.
No other domains are shown in the extension's popup list.
I don't have any XSS blocks set for any cloudflare domains either.

Even though cloudflare.com is TRUSTED, the browser console says NoScript blocket a GET from

Code: Select all

https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/ (...)
This is happening both on Firefox 145.0.2 (on Windows x64) and Firefox Nightly 147.0a1 (on Android AArch64).

Re: Cloudflare turnstile challenges being blocked even though I have set cloudflare to TRUSTED

Posted: Mon Dec 01, 2025 3:19 am
by jais
Can confirm, this is also happening on Firefox 145.0.2 (aarch64) with NoScript Version 13.5.

It's also blocking Google Recaptcha... with the domains whitelisted as usual.

The irony, I had to disable ALL NoScript restrictions to even sign up for this forum to post this.

If the extension is making half of the internet unusable there is no choice but uninstall the extension...

Re: Cloudflare turnstile challenges being blocked even though I have set cloudflare to TRUSTED

Posted: Mon Dec 01, 2025 6:33 am
by ma1
jais wrote: Mon Dec 01, 2025 3:19 am It's also blocking Google Recaptcha... with the domains whitelisted as usual.
I am posting this message as a guest (like MMAA above), therefore passing this Google Recaptcha (which does load normally for me).

Does it keep happening for you also in NoScript 13.5.1.1984 (brand new Tor-hosted stable version, meant to skip the long waiting queues on AMO)?

@MMAA, could you provide me with an URL of a page with broken turnstile?

Thank you both!

Re: Cloudflare turnstile challenges being blocked even though I have set cloudflare to TRUSTED

Posted: Mon Dec 01, 2025 10:18 am
by guest_user
Not one of the posters above, but I've been having trouble with reCaptcha and NoScript for a few days as well. Example link is my energy provider's login page - https://myppc.ppcenergy.ro/#!Login
With NoScript enabled, the placeholder for reCaptcha is there, but not showing, with NoScript disabled the reCaptcha element is shown. Some screen grabs - https://imgur.com/a/wcMfrID

Funny thing is even is page is not rendering properly for me, and I have to completely disable NoScript to get the captcha.

Re: Cloudflare turnstile challenges being blocked even though I have set cloudflare to TRUSTED

Posted: Mon Dec 01, 2025 1:29 pm
by barbaz
MMAA wrote: Mon Dec 01, 2025 12:22 am (steamdb.info is one of the pages I'm suddenly unable to access, if you need an example).
Image on https://steamdb.info/ I was not required to pass any turnstile challenge nor CAPTCHA to access it. And I am able to pass the turnstile challenge at https://techblog.willshouse.com/2012/01 ... er-agents/ with NoScript enabled. I'm using NoScript 13.5.0.902.

How have you configured your TRUSTED preset? (NoScript Options > General, TRUSTED tab)

Re: Cloudflare turnstile challenges being blocked even though I have set cloudflare to TRUSTED

Posted: Thu Dec 04, 2025 10:28 pm
by Giorgio Maone
Most likely this bug - fixed in latest builds.

Re: Cloudflare turnstile challenges being blocked even though I have set cloudflare to TRUSTED

Posted: Tue Dec 09, 2025 12:08 am
by MMAA
Yup, seems to be working perfectly again now. Thanks a lot! :D