Back to Daily Feed 
Cloudflare WAF: Smarter CAPTCHA for Search URLs
Originally published on Simon Willison's Weblog by Simon Willison
View Original Article
Share this article:
Summary & Key Takeaways
- Discovers a specific Cloudflare WAF rule for CAPTCHA management.
- The rule targets search URLs containing at least one ampersand.
- Allows simple
?q=termsearches to bypass the CAPTCHA. - Improves user experience by reducing unnecessary challenges.
- Mentions attempting to use Claude Code for rule editing, but it required switching to the Cloudflare API.
Our Commentary
This is a super niche tip, but I've definitely run into similar Cloudflare WAF frustrations. It's a good example of how small tweaks can significantly improve DX. The mention of Claude Code's limitations is also interesting; it reminds us that AI tools aren't magic bullets for every task, especially when dealing with proprietary APIs.
View Original Article
Share this article: