Disable captcha on everything but /boards/

[swagfag]

whats the point in having it enabled on doc pages/archived forum/etc
enable it just for autohotkey.com/boards

[tank]

it is but if you break browser integrity checks or are in a high threat zone you get challenged

[swagfag]

im not following.
what ure saying is, "cloudflare is enabled only for autohotkey/boards/".
so, why then do i keep getting captcha prompts on the doc pages and on the archived forums(and quite possibly on any other autohotkey.com page, i havent tested this thoroughly)?

[tank]

break browser integrity checks or are in a high threat zone you get challenged

[nnnik]

Why do we do browser integrity checks on low threat zones?

[swagfag]

so its not disabled then, is it?
so, if it's not disabled, either:
A. disable it on all pages, except for autohotkey.com/boards/ (assuming this is at all possible. if no facilities for this exist, then whatever)
B. explain to me what the point is in having it enabled on all pages, except autohotkey.com/boards/

[Scr1pter]

Why have I never faced any captcha here?
I mean, for me it's good, but I'm just wondering why other users have problems...

Cheers!

[tank]

threat zones are geographical
Browser integrity checks log for standard things browsers can do and send as part of requests
these are site wide and not part of the firewall rules

[tank]

Capture.PNG (18.75 KiB) Viewed 2604 times

If you are the site visitor:

The IP address you came from recently had bad activity online, so Cloudflare will present a challenge before you can access the website. Here's what you can do to solve the problem:

1. Passing the captcha will help reduce the threat score associated with the IP address. If no bad activity is seen from the IP address after a two-week period, then the challenge behavior will stop against that IP address.

2. You can also request that the particular site you're visiting whitelist your IP address when you pass the captcha and send a message to the site owner. If the site owner decides to whitelist your IP address, it does two things:

a) It allows you to access that site from that IP without further challenges for that site.

b) Helps correct false positives with IP data, which further helps reduce the threat score associated with the IP address.

Note: You must have cookies enabled to pass the captcha.

What does the Browser Integrity Check do?
Avatar Damon March 02, 2019 13:15
Cloudflare's Browser Integrity Check (BIC) is similar to Bad Behavior and looks for common HTTP headers abused most commonly by spammers and denies access to your page. It will also challenge visitors that do not have a user agent or a non standard user agent (also commonly used by abuse bots, crawlers or visitors).

This feature can be turned off under the Settings tab of the Cloudflare Firewall app.

Alternatively you can visit this URL to visit the page directly: https://www.cloudflare.com/a/firewall/<example.com>/waf

You are also able to selectively enable or disable this feature for certain sections of your domain by implementing a page rule. For example, you may want to disable this functionality for the section of your domain that hosts your API.