sorry I'm jumping in halfway, but can't you add

OPTIONS

to the allowlist?

and ty for bringing it up, I realized we have the same issue 😛

I mean, then you can DDoS someone with OPTIONS requests…

hmm... can the CF cache work on OPTIONS requests?

Going by https://discord.com/channels/595317990191398933/909458221419356210/1112066837987999815 , I would say no…

Oop

Why did it embed?

dang

The ,

Thanks

Backend and frontend link parsers are different

hmm, my thought is just make everything a Worker and do your own WAFy like thing for handling OPTIONS 😛

$$$?

snippets?

waiting for them…

Workers are so cheap though

Does WAF managed challenge work for rest apis deployed on workers

Hello When will the D1 service be available with quick editing

It requires html rendering, so it won’t work for APIs

Use #1025131875397812224

Hey, I'm trying to embed my profile picture which is hosted on my CDN on a website, though I'm getting this error: Is there a way to enable the hotlinking?

When you are hit by a ddos, no Don’t want to bother billing support for a refund all the time

Disable hot linking protection in scrape shield?

@Leo Why not make OPTIONS a seperate rate limiting rule? That way browsers will get the same amount of allowed requests, while you still maintain control of rate limiting OPTIONS 😛

Oh that's where it is! Thanks.

I wonder if I get Workers completely free.. I should probably ask lol.

Method matching is restricted to ent iirc?

ah dang

Method is business

is there a way to only use turnstile only after a few non-200 response ?