diff --git a/src/NzbDrone.Core/IndexerProxies/FlareSolverr/FlareSolverr.cs b/src/NzbDrone.Core/IndexerProxies/FlareSolverr/FlareSolverr.cs index 2a186f45e..2fcb1b7bb 100644 --- a/src/NzbDrone.Core/IndexerProxies/FlareSolverr/FlareSolverr.cs +++ b/src/NzbDrone.Core/IndexerProxies/FlareSolverr/FlareSolverr.cs @@ -72,10 +72,9 @@ public override HttpResponse PostResponse(HttpResponse response) InjectCookies(newRequest, result); // Use FlareSolverr's response body directly when available. - // A second HTTP request with the extracted cookies would get rejected - // because cf_clearance is validated against the TLS fingerprint of the - // client that solved the challenge (FlareSolverr's headless browser), - // which differs from .NET HttpClient's fingerprint. + // When CF selectively challenges by IP/UA, FlareSolverr may not + // receive a challenge and thus returns no cf_clearance cookie. + // A second request without that cookie gets 403'd. if (result.Solution.Response.IsNotNullOrWhiteSpace()) { var headers = new HttpHeader();