What changed #
A value you may have hardcoded is now rejected.
Affects POST /accounts/{account_id}/urlscanner/scan.
no longer accepts "AD", "AF", "AG", "BA", "BI", "BJ", "BM", "BS", "BZ", "CF", "CG", "CN", "CU", "CV", "DM", "ER", "FM", "GA", "GL", "GM", "GN", "GQ", "GW", "IR", "KI", "KM", "KN", "KP", "KY", "LC", "LI", "LS", "LY", "MC", "ML", "MR", "MS", "NE", "NI", "NR", "PG", "SB", "SC", "SD", "SH", "SL", "SM", "SO", "SS", "ST", "SV", "SY", "SZ", "TD", "TG", "TL", "TM", "TO", "UY", "VC", "VE", "VU", "WS", "YE"
Who is affected #
Code that sends POST /accounts/{account_id}/urlscanner/scan (country).
Before and after #
| Where | Before | After |
|---|---|---|
| POST /accounts/{account_id}/urlscanner/scan · country | "AD", "AE", "AF", "AG", "AL", "AM", "AO", "AR", "AT", "AU", "AZ", "BA", "BB", "BD", "BE", "BF", "BG", "BH", "BI", "BJ", "BM", "BN", "BO", "BR", "BS", "BT", "BW", "BY", "BZ", "CA", "CD", "CF", "CG", "CH", "CI", "CL", "CM", "CN", "CO", "CR", "CU", "CV", "CY", "CZ", "DE", "DJ", "DK", "DM", "DO", "DZ", "EC", "EE", "EG", "ER", "ES", "ET", "FI", "FJ", "FM", "FR", "GA", "GB", "GD", "GE", "GH", "GL", "GM", "GN", "GQ", "GR", "GT", "GW", "GY", "HN", "HR", "HT", "HU", "ID", "IE", "IL", "IN", "IQ", "IR", "IS", "IT", "JM", "JO", "JP", "KE", "KG", "KH", "KI", "KM", "KN", "KP", "KR", "KW", "KY", "KZ", "LA", "LB", "LC", "LI", "LK", "LR", "LS", "LT", "LU", "LV", "LY", "MA", "MC", "MD", "MG", "MK", "ML", "MM", "MN", "MO", "MR", "MS", "MU", "MV", "MW", "MX", "MY", "MZ", "NA", "NE", "NG", "NI", "NL", "NO", "NP", "NR", "NZ", "OM", "PA", "PE", "PG", "PH", "PK", "PL", "PS", "PT", "PY", "QA", "RO", "RS", "RU", "RW", "SA", "SB", "SC", "SD", "SE", "SH", "SI", "SK", "SL", "SM", "SN", "SO", "SR", "SS", "ST", "SV", "SY", "SZ", "TD", "TG", "TH", "TJ", "TL", "TM", "TN", "TO", "TR", "TT", "TW", "TZ", "UA", "UG", "US", "UY", "UZ", "VC", "VE", "VN", "VU", "WS", "YE", "ZA", "ZM", "ZW" | "AE", "AL", "AM", "AO", "AR", "AT", "AU", "AZ", "BB", "BD", "BE", "BF", "BG", "BH", "BN", "BO", "BR", "BT", "BW", "BY", "CA", "CD", "CH", "CI", "CL", "CM", "CO", "CR", "CW", "CY", "CZ", "DE", "DJ", "DK", "DO", "DZ", "EC", "EE", "EG", "ES", "ET", "FI", "FJ", "FR", "GB", "GD", "GE", "GH", "GR", "GT", "GU", "GY", "HK", "HN", "HR", "HT", "HU", "ID", "IE", "IL", "IN", "IQ", "IS", "IT", "JM", "JO", "JP", "KE", "KG", "KH", "KR", "KW", "KZ", "LA", "LB", "LK", "LR", "LT", "LU", "LV", "MA", "MD", "MG", "MK", "MM", "MN", "MO", "MT", "MU", "MV", "MW", "MX", "MY", "MZ", "NA", "NC", "NG", "NL", "NO", "NP", "NZ", "OM", "PA", "PE", "PF", "PH", "PK", "PL", "PR", "PS", "PT", "PY", "QA", "RE", "RO", "RS", "RU", "RW", "SA", "SE", "SG", "SI", "SK", "SN", "SR", "TH", "TJ", "TN", "TR", "TT", "TW", "TZ", "UA", "UG", "US", "UZ", "VN", "ZA", "ZM", "ZW" |
| POST /accounts/{account_id}/urlscanner/v2/scan · country | "AD", "AE", "AF", "AG", "AL", "AM", "AO", "AR", "AT", "AU", "AZ", "BA", "BB", "BD", "BE", "BF", "BG", "BH", "BI", "BJ", "BM", "BN", "BO", "BR", "BS", "BT", "BW", "BY", "BZ", "CA", "CD", "CF", "CG", "CH", "CI", "CL", "CM", "CN", "CO", "CR", "CU", "CV", "CY", "CZ", "DE", "DJ", "DK", "DM", "DO", "DZ", "EC", "EE", "EG", "ER", "ES", "ET", "FI", "FJ", "FM", "FR", "GA", "GB", "GD", "GE", "GH", "GL", "GM", "GN", "GQ", "GR", "GT", "GW", "GY", "HN", "HR", "HT", "HU", "ID", "IE", "IL", "IN", "IQ", "IR", "IS", "IT", "JM", "JO", "JP", "KE", "KG", "KH", "KI", "KM", "KN", "KP", "KR", "KW", "KY", "KZ", "LA", "LB", "LC", "LI", "LK", "LR", "LS", "LT", "LU", "LV", "LY", "MA", "MC", "MD", "MG", "MK", "ML", "MM", "MN", "MO", "MR", "MS", "MU", "MV", "MW", "MX", "MY", "MZ", "NA", "NE", "NG", "NI", "NL", "NO", "NP", "NR", "NZ", "OM", "PA", "PE", "PG", "PH", "PK", "PL", "PS", "PT", "PY", "QA", "RO", "RS", "RU", "RW", "SA", "SB", "SC", "SD", "SE", "SH", "SI", "SK", "SL", "SM", "SN", "SO", "SR", "SS", "ST", "SV", "SY", "SZ", "TD", "TG", "TH", "TJ", "TL", "TM", "TN", "TO", "TR", "TT", "TW", "TZ", "UA", "UG", "US", "UY", "UZ", "VC", "VE", "VN", "VU", "WS", "YE", "ZA", "ZM", "ZW" | "AE", "AL", "AM", "AO", "AR", "AT", "AU", "AZ", "BB", "BD", "BE", "BF", "BG", "BH", "BN", "BO", "BR", "BT", "BW", "BY", "CA", "CD", "CH", "CI", "CL", "CM", "CO", "CR", "CW", "CY", "CZ", "DE", "DJ", "DK", "DO", "DZ", "EC", "EE", "EG", "ES", "ET", "FI", "FJ", "FR", "GB", "GD", "GE", "GH", "GR", "GT", "GU", "GY", "HK", "HN", "HR", "HT", "HU", "ID", "IE", "IL", "IN", "IQ", "IS", "IT", "JM", "JO", "JP", "KE", "KG", "KH", "KR", "KW", "KZ", "LA", "LB", "LK", "LR", "LT", "LU", "LV", "MA", "MD", "MG", "MK", "MM", "MN", "MO", "MT", "MU", "MV", "MW", "MX", "MY", "MZ", "NA", "NC", "NG", "NL", "NO", "NP", "NZ", "OM", "PA", "PE", "PF", "PH", "PK", "PL", "PR", "PS", "PT", "PY", "QA", "RE", "RO", "RS", "RU", "RW", "SA", "SE", "SG", "SI", "SK", "SN", "SR", "TH", "TJ", "TN", "TR", "TT", "TW", "TZ", "UA", "UG", "US", "UZ", "VN", "ZA", "ZM", "ZW" |
Code that breaks #
// sending "AD" for country is now rejected
// sending "AF" for country is now rejected
// sending "AG" for country is now rejected
// sending "BA" for country is now rejected
// sending "BI" for country is now rejected
// sending "BJ" for country is now rejected
// sending "BM" for country is now rejected
// sending "BS" for country is now rejected
// sending "BZ" for country is now rejected
// sending "CF" for country is now rejected
// sending "CG" for country is now rejected
// sending "CN" for country is now rejected
// sending "CU" for country is now rejected
// sending "CV" for country is now rejected
// sending "DM" for country is now rejected
// sending "ER" for country is now rejected
// sending "FM" for country is now rejected
// sending "GA" for country is now rejected
// sending "GL" for country is now rejected
// sending "GM" for country is now rejected
// sending "GN" for country is now rejected
// sending "GQ" for country is now rejected
// sending "GW" for country is now rejected
// sending "IR" for country is now rejected
// sending "KI" for country is now rejected
// sending "KM" for country is now rejected
// sending "KN" for country is now rejected
// sending "KP" for country is now rejected
// sending "KY" for country is now rejected
// sending "LC" for country is now rejected
// sending "LI" for country is now rejected
// sending "LS" for country is now rejected
// sending "LY" for country is now rejected
// sending "MC" for country is now rejected
// sending "ML" for country is now rejected
// sending "MR" for country is now rejected
// sending "MS" for country is now rejected
// sending "NE" for country is now rejected
// sending "NI" for country is now rejected
// sending "NR" for country is now rejected
// sending "PG" for country is now rejected
// sending "SB" for country is now rejected
// sending "SC" for country is now rejected
// sending "SD" for country is now rejected
// sending "SH" for country is now rejected
// sending "SL" for country is now rejected
// sending "SM" for country is now rejected
// sending "SO" for country is now rejected
// sending "SS" for country is now rejected
// sending "ST" for country is now rejected
// sending "SV" for country is now rejected
// sending "SY" for country is now rejected
// sending "SZ" for country is now rejected
// sending "TD" for country is now rejected
// sending "TG" for country is now rejected
// sending "TL" for country is now rejected
// sending "TM" for country is now rejected
// sending "TO" for country is now rejected
// sending "UY" for country is now rejected
// sending "VC" for country is now rejected
// sending "VE" for country is now rejected
// sending "VU" for country is now rejected
// sending "WS" for country is now rejected
// sending "YE" for country is now rejected
Based on Cloudflare’s published API specification. How severity is decided.
source & further reading
driftwatch.et — original article
Cloudflare: Response field result removed
[Additive] OpenAI: 2 new request properties
Cloudflare: messages changed type