
3/25/2021 · Justin Zhou
What this post added
Introduced Page Shield, a client-side security product to detect attacks in end-user browsers. The first feature, Script Monitor, records JavaScript dependencies over time and alerts customers to new, unexpected dependencies. It works by adding a `Content-Security-Policy-Report-Only` header to pages, allowing browsers to send reports of JavaScript execution to Cloudflare for analysis. Future plans include code change detection and intelligent analysis of JavaScript files to classify malicious samples, and implementing a negative security model for blocking individual scripts.