Cloudflare

Page Shield can now watch for malicious outbound connections made by third-party JavaScript code

Oct 21, 2022Michael Tremante
Page Shield can now watch for malicious outbound connections made by third-party JavaScript code
SummaryAI, from the source post

Introduced Connection Monitor as a new feature for Page Shield, which detects malicious outbound connections made by third-party JavaScript code. This feature complements Script Monitor by analyzing connection endpoints and leveraging threat intelligence feeds. It utilizes the `connect-src` directive from Content Security Policies to gather data on outbound connections initiated by various browser APIs. The implementation stores the scheme and host portion of URLs by default for privacy, with an option to enable path storage for more comprehensive threat analysis.

More from the Website Security & Threat Management trail