Skip to content

cf.waf.content_scan.has_encrypted_obj

cf.waf.content_scan.has_encrypted_objBoolean

Indicates whether the request contains at least one password-protected (encrypted) content object.

Requires a Cloudflare Enterprise plan with malicious uploads detection.

Refer to Encrypted content for the file types this field covers.

Example usage:

# Block requests containing password-protected uploads
cf.waf.content_scan.has_encrypted_obj and http.request.uri.path eq "/upload"
Categories:
  • Request

Was this helpful?