[Fixed] Cloudflare turnstile challenges being blocked even though I have set cloudflare to TRUSTED
Posted: Mon Dec 01, 2025 12:22 am
Hi!
Sometime around this week, cloudflare challenges seemed to stop working for me when NoScript is enabled. I just get stuck in the "Verifying you are human. This may take a few seconds." screen indefinitely.
A spinning loader appears and disappears, but the automatic captcha box just never appears until I disable the extension altogether and reload the page.
I've had cloudflare set to TRUSTED in my settings for a long while and that used to work fine until now, and I can't recall changing any significant setting recently.
I also have set the top domains I'm trying to access as trusted individually, in the CUSTOM checkbox (steamdb.info is one of the pages I'm suddenly unable to access, if you need an example).
Also tried setting cloudflareinsights.com and challenges.cloudflare.com to TRUSTED, to no avail.
No other domains are shown in the extension's popup list.
I don't have any XSS blocks set for any cloudflare domains either.
Even though cloudflare.com is TRUSTED, the browser console says NoScript blocket a GET from
This is happening both on Firefox 145.0.2 (on Windows x64) and Firefox Nightly 147.0a1 (on Android AArch64).
Sometime around this week, cloudflare challenges seemed to stop working for me when NoScript is enabled. I just get stuck in the "Verifying you are human. This may take a few seconds." screen indefinitely.
A spinning loader appears and disappears, but the automatic captcha box just never appears until I disable the extension altogether and reload the page.
I've had cloudflare set to TRUSTED in my settings for a long while and that used to work fine until now, and I can't recall changing any significant setting recently.
I also have set the top domains I'm trying to access as trusted individually, in the CUSTOM checkbox (steamdb.info is one of the pages I'm suddenly unable to access, if you need an example).
Also tried setting cloudflareinsights.com and challenges.cloudflare.com to TRUSTED, to no avail.
No other domains are shown in the extension's popup list.
I don't have any XSS blocks set for any cloudflare domains either.
Even though cloudflare.com is TRUSTED, the browser console says NoScript blocket a GET from
Code: Select all
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/ (...)
on