Website Security & Threat Management
Page Shield is generally available

Page Shield is generally available

12/8/2021 · Michael Tremante

What this post added

This post announces the General Availability of Page Shield, a new capability designed to protect end-user data from browser-based supply chain attacks. It details how Page Shield leverages Cloudflare's network position to monitor JavaScript files loaded by web applications, providing visibility into third-party scripts, detecting malicious behavior through threat feeds and a classifier, and outlining future plans for prevention and mitigation. The post explains the use of Content Security Policy (CSP) with report-only directives to collect script information and describes the detection mechanisms, including hostname/URL categorization and a classifier that analyzes script behavior for correlations with data exfiltration.

Read the original post ↗