{"id":19000738,"date":"2026-08-23T17:32:09","date_gmt":"2026-08-23T17:32:09","guid":{"rendered":"https:\/\/wordpress.org\/support\/topic\/berqwp-4-1-13-corrupts-cloudflare-injected-inline-javascript\/"},"modified":"2026-08-23T17:32:09","modified_gmt":"2026-08-23T17:32:09","slug":"berqwp-4-1-13-corrupts-cloudflare-injected-inline-javascript","status":"publish","type":"topic","link":"https:\/\/wordpress.org\/support\/topic\/berqwp-4-1-13-corrupts-cloudflare-injected-inline-javascript\/","title":{"rendered":"BerqWP 4.1.13 corrupts Cloudflare-injected inline JavaScript"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Hi there,<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">we found a reproducible JavaScript corruption issue with BerqWP 4.1.13 on a WordPress website proxied through Cloudflare.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Environment:<\/p>\n\n\n\n<ul>\n<li>BerqWP 4.1.13<\/li>\n\n\n\n<li>WordPress 7.1<\/li>\n\n\n\n<li>Divi 5.11.1<\/li>\n\n\n\n<li>PHP 8.3<\/li>\n\n\n\n<li>Cloudflare proxy enabled<\/li>\n\n\n\n<li>Varnish and Redis object caching enabled<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Cloudflare injects the following valid loader inside an inline JavaScript string:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">a.src=&#8217;\/cdn-cgi\/challenge-platform\/scripts\/jsd\/main.js&#8217;;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">After the page is processed by BerqWP, it becomes similar to:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">a. data-berqwpsrc=&#8221;https:\/\/example.com\/cdn-cgi\/challenge-platform\/scripts\/jsd\/main.js&#8221;<br \/>src=&#8221;data:image\/gif;placeholder=\u2026&#8221;;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The resulting JavaScript is syntactically invalid and causes:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Uncaught SyntaxError: Unexpected identifier &#8216;https&#8217;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">We reproduced the issue even after:<\/p>\n\n\n\n<ol>\n<li>Adding <code>\/cdn-cgi\/challenge-platform\/<\/code> to the JavaScript exclusions.<\/li>\n\n\n\n<li>Adding the same path to the CDN exclusions.<\/li>\n\n\n\n<li>Disabling \u201cDefer Excluded JavaScript\u201d.<\/li>\n\n\n\n<li>Disabling the BerqWP CDN.<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">The error disappears when the affected pages are excluded completely from BerqWP page optimization and caching. The Cloudflare loader then remains valid and the browser reports no JavaScript errors.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Could you please confirm:<\/p>\n\n\n\n<ol>\n<li>Whether this is a known issue in BerqWP 4.1.13.<\/li>\n\n\n\n<li>Whether a newer version contains a fix.<\/li>\n\n\n\n<li>How to prevent the HTML\/lazy-loading optimizer from modifying JavaScript code contained inside inline script strings.<\/li>\n\n\n\n<li>Whether there is a filter or supported exclusion that can disable this transformation without disabling full-page optimization.<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">For privacy reasons, we cannot provide the production domain publicly. We can provide additional sanitized HTML excerpts or reproduce the issue in a temporary protected staging environment if strictly necessary.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Best,<br \/>Paolo<\/p>\n","protected":false},"template":"","class_list":["post-19000738","topic","type-topic","status-publish","hentry"],"jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic\/19000738","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic"}],"about":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/types\/topic"}],"version-history":[{"count":0,"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic\/19000738\/revisions"}],"wp:attachment":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/media?parent=19000738"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}