Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Fix #655: Always emit Turnstile domains, even when empty #659

Merged
merged 2 commits into from
Dec 22, 2023
Merged

Fix #655: Always emit Turnstile domains, even when empty #659

merged 2 commits into from
Dec 22, 2023

Commits on Dec 21, 2023

  1. Update VCR for Turnstile Widgets 

    This includes more widgets, including more 'exotic' configs - and adds new response fields introduced over time.
    @punkeel
    punkeel committed Dec 21, 2023
    Configuration menu
    Copy the full SHA
    c2fcbeb View commit details
    Browse the repository at this point in the history

  2. Always emit Turnstile domains, even when empty 

    When Turnstile is configured with an empty list of domains, no validation
is performed by Cloudflare - the widget can be used anywhere. The website
owner is responsible for validating the challenge was solved on the "right"
website.
This feature is gated behind an entitlement, and `domains = []` is used to
enable this. This is *not* a default value for domains, it must be picked
explicitly.

Fixes cloudflare#655.
    @punkeel
    punkeel committed Dec 21, 2023
    Configuration menu
    Copy the full SHA
    f787ca4 View commit details
    Browse the repository at this point in the history