Skip to content

Commit 85a3c72

Browse files
authored
[WAF] Update max object size to 30 MB (#24312)
1 parent 19f5acb commit 85a3c72

File tree

2 files changed

+7
-7
lines changed

2 files changed

+7
-7
lines changed

src/content/docs/waf/detections/malicious-uploads/example-rules.mdx

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -31,16 +31,16 @@ This custom rule example blocks requests addressed at `/upload` with uploaded co
3131

3232
## Block requests with uploaded files over 500 KB
3333

34-
This custom rule example blocks requests addressed at `/upload` with uploaded content objects over 500 KB in size:
34+
This custom rule example blocks requests addressed at `/upload` with uploaded content objects over 500 KB (512,000 bytes) in size:
3535

36-
- Expression: `any(cf.waf.content_scan.obj_sizes[*] > 500000) and http.request.uri.path eq "/upload"`
36+
- Expression: `any(cf.waf.content_scan.obj_sizes[*] > 512000) and http.request.uri.path eq "/upload"`
3737
- Action: _Block_
3838

39-
## Block requests with uploaded files over the content scanning limit (15 MB)
39+
## Block requests with uploaded files over the content scanning limit (30 MB)
4040

41-
This custom rule example blocks requests with uploaded content objects over 15 MB in size (the current content scanning limit):
41+
This custom rule example blocks requests with uploaded content objects over 30 MB in size (the current content scanning limit):
4242

43-
- Expression: `any(cf.waf.content_scan.obj_sizes[*] >= 15728640)`
43+
- Expression: `any(cf.waf.content_scan.obj_sizes[*] >= 31457280)`
4444
- Action: _Block_
4545

46-
In this example, you must also test for equality because currently any file over 15 MB will be handled internally as if it had a size of 15 MB (15,728,640 bytes). This means that using the `>` (greater than) [comparison operator](/ruleset-engine/rules-language/operators/#comparison-operators) would not work for this particular rule — you should use `>=` (greater than or equal) instead.
46+
In this example, you must also test for equality because currently any file over 30 MB will be handled internally as if it had a size of 30 MB (31,457,280 bytes). This means that using the `>` (greater than) [comparison operator](/ruleset-engine/rules-language/operators/#comparison-operators) would not work for this particular rule — you should use `>=` (greater than or equal) instead.

src/content/docs/waf/detections/malicious-uploads/index.mdx

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -55,7 +55,7 @@ Content scanning can check the following content objects for malicious content:
5555

5656
All content objects in an incoming request will be checked, namely for requests with multiple uploaded files (for example, a submitted HTML form with several file inputs).
5757

58-
The content scanner will fully check content objects with a size up to 15 MB. For larger content objects, the scanner will analyze the first 15 MB and provide scan results based on that portion of the object.
58+
The content scanner will fully check content objects with a size up to 30 MB. For larger content objects, the scanner will analyze the first 30 MB and provide scan results based on that portion of the object.
5959

6060
:::note
6161

0 commit comments

Comments
 (0)