The Chonkerton

Cloudflare CAPTCHA on at least one ampersand

dev_tools

According to developer Simon Willison, there's a surprisingly elegant way to fine-tune Cloudflare's bot protection. By setting a rule that triggers CAPTCHA only on search URLs containing an ampersand—a signal of more complex, crawler-like queries—he's blocked aggressive scrapers while keeping simple searches like '?q=lemur' free and clear. It's the kind of small technical tweak that can save users from constant verification prompts.

Source: https://simonwillison.net/2026/Jun/16/captcha-on-at-least...

Listen to this story

Hear this and more stories in a personalized audio briefing.

Open The Chonkerton