How Cloudflare can help stop malware before it reaches your app

Introduces WAF Content Scanning, a new feature that scans uploaded files for malware. It integrates with the Web Application Firewall (WAF) to block malicious files before they reach application servers. The feature supports scanning files up to 1MB, with plans to increase this limit. It uses heuristic detection for 'content objects' and supports parsing of multipart/form-data, multipart/mixed, and base64 encoded JSON payloads. The scanning engine is deployed locally on each server handling traffic, minimizing latency. The feature separates detection from mitigation, allowing for discovery of file upload endpoints and flexible rule creation using scan results. Custom scan expressions and custom response types are supported for JSON payloads. Future improvements include increasing max content size, adding a 'rewrite' action for quarantine, and enhancing analytics.