---
title: "Enable JavaScript and cookies to continue (fix)"
canonical_url: "https://superbot.gg/fix/cloudflare-enable-javascript-and-cookies-to-continue"
summary: "A Cloudflare challenge page answered instead of the site. What it is, how to get past it as a visitor, and what superbot does when a page serves it."
---

> Markdown of https://superbot.gg/fix/cloudflare-enable-javascript-and-cookies-to-continue. Site index: /llms.txt.

Cloudflare challenge page

# Enable JavaScript and cookies to continue

This is the text a Cloudflare challenge page serves. Cloudflare does not publish its copy. The same wall also shows as `Just a moment...` and `Checking your browser before accessing`.

Cloudflare put a check before the page.
Your client did not pass it.

[Get the app](https://superbot.gg/download?cta%5Fid=page%5Finstall) [other errors](https://superbot.gg/fix)

## What it means

The site runs behind Cloudflare, and Cloudflare wants to check the visitor before it serves the page. What you got is the challenge page: HTTP 403, a `cf-mitigated: challenge` header and a script that only a browser runs.

A browser with JavaScript and cookies on can run the check. A script that fetches the URL over plain HTTP gets the challenge text and nothing else.

## Fix it

1. In a browser, turn JavaScript and cookies on for the site, turn off extensions that block scripts, and reload.
2. In a script, test for the header: `response.headers.get("cf-mitigated") === "challenge"`. Cloudflare sets it on every challenge page, so your code can tell a challenge from the page.
3. Ask for the same data another way: the site's API, its feed or a copy of the data. A challenge means the owner chose to guard the page.

## With superbot

superbot's read tool opens a page that refused a plain fetch in a real browser. A real browser may be served the page, and the answer then holds its text.

It may be refused too. Then the answer says the page refused and why. The next step is another source for the same facts.

superbot does not defeat a challenge. The site decides what a reader gets.

ask

Read https://openai.com and tell me what the page says. If it will not open, say why.

reply

```
It opened; openai.com's homepage leads with "GPT-6 and Intelligent UI for everyone" (Product, Oct 7, 2026).

The page is a marketing/news home.

…
```

A real answer on 2026-10-18, trimmed. A plain fetch of this address returned the challenge page that day. This run was served the page. Another run may not be.

This needs an account.
An agent with none signs you in through [/auth.md](https://superbot.gg/auth.md).
You read back one emailed code.

## Related

- [403 Client Error: Forbidden for url](https://superbot.gg/fix/http-403-forbidden-when-scraping)
- [You need to enable JavaScript to run this app.](https://superbot.gg/fix/you-need-to-enable-javascript-to-run-this-app)
- [429 Client Error: Too Many Requests for url](https://superbot.gg/fix/http-429-too-many-requests-when-scraping)

Source: [Cloudflare docs: detect a Challenge Page response](https://developers.cloudflare.com/cloudflare-challenges/challenge-types/challenge-pages/detect-response/). The string was read from a live challenge page. Read on 2026-10-18.