# Onebox, favicons y la "Protección contra hotlink" de Cloudflare

**URL:** <https://meta.discourse.org/t/onebox-favicons-and-cloudflares-hotlink-protection/120219>\
**Category:** Product Support\
**Created:** [13 Junio, 2019 08:54 UTC](https://meta.discourse.org/t/onebox-favicons-and-cloudflares-hotlink-protection/120219 "2019-06-13T08:54:36Z")\
**Posts on this page:** 1\
**Showing post:** 1

<div class="post-metadata">

**Author:** ![chrisc](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/chrisc/32/119982_2.png) [@chrisc](https://meta.discourse.org/u/chrisc)\
**Post date:** [13 Junio, 2019 08:54 UTC](https://meta.discourse.org/t/onebox-favicons-and-cloudflares-hotlink-protection/120219/1 "2019-06-13T08:54:36Z")

</div>

The following WordPress site is behind Cloudflare, currently with " Scrape Shield", “Hotlink Protection” off:

> **[Co-operators reports soaring demand for community support](https://www.thenews.coop/139235/sector/worker-coops/worker-co-op-weekend-2019-restorative-sociable-inspiring-get-together/)**
>
> As Canadian communities face tougher pressures, the demand for support from charities and non profits continues to soar, warns Co-operators

When “Hotlink Protection” is on the article image is downloaded by Discourse to display in the onebox but the favicon is not (in Firefox this is clear as there is an empty box):

 ![Screenshot_2019-06-13%20Co-operatives%20UK%20Workers%20Co-op%20Weekend%20May%2010th-12th%202019](https://global.discourse-cdn.com/meta/original/3X/3/2/326005389f6c64a55635f2f6665cc02d83553b4a.png)

This is the HTML source:

```html
<img src="https://www.thenews.coop/wp-content/uploads/favicon-1.ico" 
     class="site-icon" width="64" height="64">

```

With “Hotlink Protection” on the favicon is not displayed due to the Cloudflare serving a “Error 1011, Access denied”.

I was also wondering, has the downloading and serving locally, of favicons been considered for cases where Cloudflare’s “Hotlink Protection” is on?

---

_[View the full topic](https://meta.discourse.org/t/onebox-favicons-and-cloudflares-hotlink-protection/120219)._