u/KXfjgcy8m32bRntKXab2

First post here. I hope I don't go against this sub rules.

I have vibe coded a small self hosted app that I use as my default search engine in Firefox. Queries work great and the app does what it's supposed to do.

My app also has a suggestion URL endpoint which works great when running locally. Firefox is configured to call the suggestion URL http://localhost:8080/suggest?q=%s and as soon as I type I receive the correct suggestions from my app in the URL bar.

Now if I configure Firefox to the public instance of my app (suggestion URL https://app.example.com/suggest?q=%s hosted behind Cloudflare), I see that Firefox never send queries to the suggestion endpoint at all. Cloudflare logs show no request. My app do not receive any requests.

If I call https://app.example.com/suggest?q=test from the URL bar, the endpoint works and I get the expected JSON results. I have configured the endpoint to returns those headers: access-control-allow-origin * and content-type is application/json.

It feels like Firefox refuses to send suggestion queries to my public domain at all while localhost is accepted. Is there any extra security around suggestion URL that I'm not aware of?