How Cloudflare can help stop malware before it reaches your app

What this post added

Introduced WAF Content Scanning, a new feature integrated with the Web Application Firewall (WAF) that scans file uploads for malware. The engine detects 'content objects' using heuristics, avoiding scanning of common text types (HTML, JSON, XML). It supports multipart/form-data, multipart/mixed, and base64-encoded JSON payloads, parsing and scanning individual components. Scans run inline with HTTP traffic, locally on each server, with a current limit of 1MB per file. The feature exposes scan results as WAF fields (e.g., `cf.waf.content_scan.has_malicious_obj`) enabling custom rules for blocking, logging, or enforcing content types. It also facilitates discovery of upload endpoints through Security Analytics.