Isn't this covered here? https://developers.cloudflare.com/browser-rendering/referenc...
replyNo, hence all their examples using User-Agent: *
reply>So yet another opt out bot which you need your web server to match on special behaviour to block
replyGiven that malicious bots are allegedly spoofing real user agents, "another user agent you have to add to your list" seems like the least of your problems.
It is cloudflare who made the claim that they are well behaved unlike those other bots and that their behaviour can be controlled by robots.txt
replyIf I need to treat cloudflare bots the same as malicious bots, that undermines their claim.
Not 'allegedly' - it's just a fact. Even if you're not malicious however it's still sometimes necessary because the server may have different sites for different browsers and check user agents for the experience they deliver. So then even for legitimate purposes you need to at least use the prefix of the user agent that the server expects.
reply