Yall have a good day 👍

Now try spoofing user agents even once

email server

is it possible to use reverse proxy to have a JavaScript injection to change some elements or hide some elements in a entire subdomain

You can try WAF in combination from disable IT in X-Robots and with rate limiting ig

Is it possible to stop a specific script from loading using cloudflare? We have a big site, nobody internally recognises the following script, it can't be found in the HTML and we have no clue if its some malware or how its possible that Google Speed Insights is detecting this script loading 7x times https://cdn.stickyadstv.com/mustang/vpaid-adapter.min.js It seems to load 7x sometimes, it doesn't load at all some other times on the exact same page

I think you can Block IT with the Contest Security Header

I think I got it to destroy CF Warp

I turned WARP .9 Sec on before it registered the Zero Trust O.o

wouldn't that block all external scripts? we have plenty that we do need to load, its just that specific one

Isnt it so that you can also add just one source? BUt as I know you can block it in the Rules ig

I've never even used workers i guess ill have to learn now then.. ive no idea where to start but that sounds solid

is this what i need to familiarize myself with to set that up? https://developers.cloudflare.com/workers/examples/security-headers/

I dont also use workers lol

oh so how are you setting that up then?

If its on my private Network with CF Tunnel and anything else normally via A and AAA records

And if I tunnels is crashing the whole time the next days I'll switch to anything else

More Spam and disconnects and its used ;-;

🤯 you just opened up my possibilities

thanks

lel

You can use response header transform rules to add the header

Yes

Thats the only possibility I see rn.

You can also HTMLRewrite the script off the page?

Yes I'm looking rn for the JavaScript Script I have

nvmd I did something copletely different there

The problem is it is still loaded or not?

The script can’t load if it doesn’t exist

But he said the script wasn’t in the html