Introducing HAR Sanitizer: secure HAR sharing
Oct 26, 2023Kenny Johnson
Summary
Introduced HAR Sanitizer, a client-side tool built on Cloudflare Workers, to remove session-related cookies and JWTs from HAR files, mitigating attacks that exploit stolen session tokens. The tool is open-sourced and available at no cost. It includes specific tuning for Cloudflare Access JWTs by stripping the cryptographic signature while preserving debugging information. Future enhancements will include DLP scanning and automated sanitization in collaboration tools.
More from the Website Security & Threat Management trail
- We tested our own WAF with frontier AI models. Here’s what we found
- When scanners miss the attack: how Cloudflare Client-Side Security protects storefronts
- Introducing automatic remediation policies with Cloudflare CASB
- Introducing context-aware vulnerability discovery and remediation with Cloudflare Managed Defense and OpenAI Daybreak Models
- Introducing Adaptive Intelligence: undermining the economics of every bot attack