CF-Changes WAF - Malicious uploads detection flags non-multipart Content-Type headers with a boundary

[ENF News Bot]

The malicious uploads detection now sets cf.waf.content_scan.has_failed to true for requests whose Content-Type header has a boundary parameter but type is not multipart/*, for example application/json; boundary=example. The body of these requests is not scanned.

For more information, refer to Multipart requests.

Continue reading...