Go wild: Wildcard support in Rules and a new open-source wildcard crate
Aug 22, 2024Nikita Cano, Diogo Sousa

Summary
Introduced wildcard support ('wildcard' and 'strict wildcard' operators) to the Ruleset Engine, enabling flexible pattern matching in various Cloudflare products. Developed a custom Rust crate for byte-oriented, UTF-8 compatible wildcard matching with substring capture, supporting up to 8 asterisks and escape sequences. Implemented the `wildcard_replace()` function for dynamic URL redirection in Single Redirects and added a simplified UI for wildcard pattern configuration.
More from the Website Security & Threat Management trail
- We tested our own WAF with frontier AI models. Here’s what we found
- When scanners miss the attack: how Cloudflare Client-Side Security protects storefronts
- Introducing automatic remediation policies with Cloudflare CASB
- Introducing context-aware vulnerability discovery and remediation with Cloudflare Managed Defense and OpenAI Daybreak Models
- Introducing Adaptive Intelligence: undermining the economics of every bot attack