Skip to content
Cloudflare Docs

cf.waf.content_scan.num_obj

cf.waf.content_scan.num_obj Integer

The number of content objects detected in the request (zero or greater).

Requires a Cloudflare Enterprise plan with malicious uploads detection.

Example usage:

# Check if requests to a specific endpoint contain more than two content objects
cf.waf.content_scan.num_obj > 2 and http.request.uri.path eq "/upload"
Categories:
  • Request