[fbacall]

Summary of changes

• Triggers a page reload if Cloudflare sends a "Managed Challenge".

Motivation and context

The CSP was blocking such responses when they are loaded as part of a turbolinks request, e.g. if the user is applying filters, and they would just see a blank page.

Checklist

• I have read and followed the CONTRIBUTING guide.
• I confirm that I have the authority necessary to make this contribution on behalf of its copyright owner and agree to license it to the TeSS codebase under the BSD license.

[Copilot]

🟢 Approval recommended

No active review issues were identified for the change that handles Cloudflare Managed Challenges with full-page navigation.

No open issues 🎉

What changed in this PR

This PR adds full-page navigation when Cloudflare returns a Managed Challenge during a Turbolinks request, addressing blank pages caused by the application’s Content Security Policy blocking the challenge response.

Changes:

• Checks the cf-mitigated response header when a Turbolinks request ends.
• Navigates to the response URL, falling back to the current URL, so the challenge loads with its own headers.

File	Description
app/​assets/​javascripts/​application.js	Adds challenge detection and full-page navigation to the Turbolinks request-end handler.

_{Review effort: Balanced}