Page Shield can now watch for malicious outbound connections made by third-party JavaScript code
Oct 21, 2022Michael Tremante

Summary
Introduced Connection Monitor as a new feature for Page Shield, which detects malicious outbound connections made by third-party JavaScript code. This feature complements Script Monitor by analyzing connection endpoints and leveraging threat intelligence feeds. It utilizes the `connect-src` directive from Content Security Policies to gather data on outbound connections initiated by various browser APIs. The implementation stores the scheme and host portion of URLs by default for privacy, with an option to enable path storage for more comprehensive threat analysis.
More from the Website Security & Threat Management trail
- We tested our own WAF with frontier AI models. Here’s what we found
- When scanners miss the attack: how Cloudflare Client-Side Security protects storefronts
- Introducing automatic remediation policies with Cloudflare CASB
- Introducing context-aware vulnerability discovery and remediation with Cloudflare Managed Defense and OpenAI Daybreak Models
- Introducing Adaptive Intelligence: undermining the economics of every bot attack