Cloudflare CAPTCHA on at least one ampersand
dev_tools
According to developer Simon Willison, there's a surprisingly elegant way to fine-tune Cloudflare's bot protection. By setting a rule that triggers CAPTCHA only on search URLs containing an ampersand—a signal of more complex, crawler-like queries—he's blocked aggressive scrapers while keeping simple searches like '?q=lemur' free and clear. It's the kind of small technical tweak that can save users from constant verification prompts.
Source: https://simonwillison.net/2026/Jun/16/captcha-on-at-least...
Listen to this story
Hear this and more stories in a personalized audio briefing.
Open The Chonkerton