If you're only using Cloudfare for DNS, but HTTPS connections go directly to your server, how does it inject HTML?
You must be allowing Cloudfare to terminate your HTTPS connections; i.e. using them for actual proxying.
The orange cloud icon in dns settings, in other words, but that's opt-out too. So yeah - double opt-out I guess.
The orange cloud icon in dns settings, in other words, but that's opt-out too. So yeah - double opt-out I guess.