Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion src/content/docs/turnstile/concepts/ephemeral-id.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -10,7 +10,7 @@ Ephemeral IDs generate a unique short-lived ID that can link behavior to a speci

When the same visitor interacts with Turnstile widgets from different Cloudflare customers, they receive different Ephemeral IDs for each contact. In attacks where fraudsters attempt to disguise themselves using different IP addresses, Ephemeral IDs detect abuse patterns more accurately than determining whether the visitor is a human or a bot.

Ephemeral IDs not unique and have a lifespan of up to a few days. They can be useful for identifying a bad actor in acute attacks such as sudden spikes in fake account creations or credential stuffing.
Ephemeral IDs are not unique and have a lifespan of up to a few days. They can be useful for identifying a bad actor in acute attacks such as sudden spikes in fake account creations or credential stuffing.

Refer to the [blog post](https://blog.cloudflare.com/turnstile-ephemeral-ids-for-fraud-detection/) for more information.

Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -61,6 +61,6 @@ If the widget is embedded on a hostname not listed, it will display an error mes

## Optional hostname validation (Enterprise only)

Customers with Enterprise Bot Management or Enterprise Turnstile can have the optional any hostname validation entitlement.
Customers with Enterprise Bot Management or Enterprise Turnstile can have the optional `any hostname` validation entitlement.

By default, a widget requires at least one hostname to be entered. With this entitlement, you can create and use a widget without entering any hostnames for the widget. Contact your account team to enable this entitlement.
Original file line number Diff line number Diff line change
Expand Up @@ -86,7 +86,9 @@ https://challenges.cloudflare.com/turnstile/v0/api.js?render=explicit

When using `render=explicit`, HTML elements with the `cf-turnstile` class will not show a challenge. The `turnstile.render` function must be invoked using the following steps. To combine both options, pass a query string of `?render=explicit&onload=onloadTurnstileCallback`:

`https://challenges.cloudflare.com/turnstile/v0/api.js?render=explicit&onload=onloadTurnstileCallback`
```txt
https://challenges.cloudflare.com/turnstile/v0/api.js?render=explicit&onload=onloadTurnstileCallback
```

## Explicitly render the Turnstile widget

Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -22,7 +22,7 @@ We recommend validating your CSP with [Google's CSP Evaluator](https://csp-evalu
You cannot set your own CSP and/or Referer-Policy via meta tags or [Transform rules](/rules/transform/) in challenge pages.
:::

## Pre-Clearance support
## Pre-clearance support

If you are using [Turnstile in pre-clearance mode](/turnstile/concepts/pre-clearance-support/), Turnstile sets the `cf_clearance` cookie by doing a fetch request to a special endpoint in [`/cdn-cgi/`](/fundamentals/reference/cdn-cgi-endpoint/) of your domain.

Expand Down