Looks like imdb.com is behind a WAF which prevents scraping (and thus oneboxing), so I’m afraid there’s not much we can do about it, other than improving the message shown to the user
main ← onebox-bot-challenge-message
merged 01:49PM - 16 Jul 26 UTC
Previously, when a site behind a bot-protection service answered a onebox fetch … with a JavaScript challenge — IMDb, for example, currently returns `202 Accepted` with an AWS WAF challenge page — the preview showed the baffling "the web server returned an error code of 202", a success code presented as an error with no hint of the actual cause.
This change detects the documented challenge headers (AWS WAF's `x-amzn-waf-action` and Cloudflare's `cf-mitigated`) in `FinalDestination` and shows a message explaining that the site requires visitors to pass a verification step in a web browser. Accepting 2xx statuses beyond 200 instead would not help: the challenge response carries no OpenGraph data, so the onebox would just come out silently blank.
Reported in https://meta.discourse.org/t/407725
**BEFORE**
<img width="726" height="605" alt="2026-07-16 @ 09 51 32" src="https://github.com/user-attachments/assets/929b116d-d07a-4aca-a655-6c4b1d0db607" />
**AFTER**
<img width="718" height="685" alt="2026-07-16 @ 09 52 10" src="https://github.com/user-attachments/assets/7b555557-6cb4-40ac-a7dc-32bf2515e357" />
2 Likes