From 13ed4d689400b57d47afe97d49a776563bbe38a9 Mon Sep 17 00:00:00 2001 From: Pedro Sousa <680496+pedrosousa@users.noreply.github.com> Date: Wed, 19 Mar 2025 19:06:33 +0000 Subject: [PATCH 1/2] [Security] Update settings --- src/content/docs/security/settings.mdx | 47 +++++++++++-------- .../bots/get-started-pro-biz-steps.mdx | 11 +++-- 2 files changed, 33 insertions(+), 25 deletions(-) diff --git a/src/content/docs/security/settings.mdx b/src/content/docs/security/settings.mdx index b48a86de5955b3..801a1f255520be 100644 --- a/src/content/docs/security/settings.mdx +++ b/src/content/docs/security/settings.mdx @@ -84,23 +84,30 @@ The client-side abuse module includes features and settings from [Page Shield](/ This section allows you to configure multiple security-related settings. The following table links to additional information about each setting: -| Setting | Location in previous dashboard navigation | -| ------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------- | -| [Endpoint labels](/api-shield/management-and-monitoring/endpoint-labels/) | **Security** > **Settings** > **Labels** | -| [Session identifiers](/api-shield/management-and-monitoring/session-identifiers/#rule-form) | **Security** > **API Shield** > **Settings** | -| [Uploaded schemas](/api-shield/security/schema-validation/) | **Security** > **API Shield** > **Schema Validation** | -| [Learned schemas](/api-shield/security/schema-validation/) | **Security** > **API Shield** > **Schema Validation** | -| [Token configuration](/api-shield/security/jwt-validation/#add-a-token-validation-configuration) | **Security** > **API Shield** > **Settings** | -| [Client-side resource alerts](/page-shield/detection/configure-alerts/#rule-form) | **Security** > **Page Shield** > **Settings**
Account Home > **Notifications** | -| [Reporting endpoint](/page-shield/reference/settings/#reporting-endpoint) | **Security** > **Page Shield** > **Settings** | -| [Data processing](/page-shield/reference/settings/#connection-target-details) | **Security** > **Page Shield** > **Settings** | -| [IP lists](/waf/tools/lists/custom-lists/#lists-with-ip-addresses-ip-lists) | Account Home > **Manage Account** > **Configurations** | -| [Custom username and password location](/waf/detections/leaked-credentials/#custom-detection-locations) | **Security** > **Settings** | -| [Custom content location](/waf/detections/malicious-uploads/#custom-scan-expressions) | **Security** > **Settings** | -| [JavaScript detections](/bots/reference/javascript-detections/) | **Security** > **Bots** > **Configure Super Bot Fight Mode
Security** > **Bots** > **Configure Bot Management** | -| [Auto-update machine learning model](/bots/reference/machine-learning-models/) | **Security** > **Bots** > **Configure Bot Management** | -| [Enable Security.txt](/security-center/infrastructure/security-file/) | **Security** > **Settings** | -| [Challenge Passage](/waf/tools/challenge-passage/) | **Security** > **Settings** | -| [Browser Integrity Check](/waf/tools/browser-integrity-check/) | **Security** > **Settings** | -| [Replace insecure JavaScript libraries](/waf/tools/replace-insecure-js-libraries/) | **Security** > **Settings** | -| [Security Level](/waf/tools/security-level/) | **Security** > **Settings** | +| Setting | Location in previous dashboard navigation | +| ----------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------- | +| [Endpoint labels](/api-shield/management-and-monitoring/endpoint-labels/) | **Security** > **Settings** > **Labels** | +| [Session identifiers](/api-shield/management-and-monitoring/session-identifiers/#rule-form) | **Security** > **API Shield** > **Settings** | +| [Schemas default action](/api-shield/security/schema-validation/#change-the-global-default-action-of-schema-validation) | **Security** > **API Shield** > **Schema Validation** | +| [Uploaded schemas](/api-shield/security/schema-validation/) | **Security** > **API Shield** > **Schema Validation** | +| [Learned schemas](/api-shield/security/schema-validation/) | **Security** > **API Shield** > **Schema Validation** | +| [Token configuration](/api-shield/security/jwt-validation/#add-a-token-validation-configuration) | **Security** > **API Shield** > **Settings** | +| [Client-side resource alerts](/page-shield/detection/configure-alerts/#rule-form) | **Security** > **Page Shield** > **Settings**
Account Home > **Notifications** | +| [Reporting endpoint](/page-shield/reference/settings/#reporting-endpoint) | **Security** > **Page Shield** > **Settings** | +| [Data processing](/page-shield/reference/settings/#connection-target-details) | **Security** > **Page Shield** > **Settings** | +| [IP lists](/waf/tools/lists/custom-lists/#lists-with-ip-addresses-ip-lists) | Account Home > **Manage Account** > **Configurations** | +| [Custom username and password location](/waf/detections/leaked-credentials/#custom-detection-locations) | **Security** > **Settings** | +| [Custom content location](/waf/detections/malicious-uploads/#custom-scan-expressions) | **Security** > **Settings** | +| [Custom sensitive data deployment](/waf/managed-rules/reference/sensitive-data-detection/#configure-in-the-dashboard) | **Security** > **Sensitive Data** | +| [Block definitely automated traffic](/bots/get-started/biz-and-ent/#bot-settings) | **Security** > **Bots** > **Configure Super Bot Fight Mode
Security** > **Bots** > **Configure Bot Management** | +| [Block likely bots](/bots/get-started/biz-and-ent/#bot-settings) | **Security** > **Bots** > **Configure Super Bot Fight Mode
Security** > **Bots** > **Configure Bot Management** | +| [Allow verified bots](/bots/get-started/biz-and-ent/#bot-settings) | **Security** > **Bots** > **Configure Super Bot Fight Mode
Security** > **Bots** > **Configure Bot Management** | +| [Static resource protection](/bots/reference/static-resources/) | **Security** > **Bots** > **Configure Super Bot Fight Mode
Security** > **Bots** > **Configure Bot Management** | +| [Optimize for WordPress](/bots/reference/wordpress-loopback-issue/) | **Security** > **Bots** > **Configure Super Bot Fight Mode
Security** > **Bots** > **Configure Bot Management** | +| [JavaScript detections](/bots/reference/javascript-detections/) | **Security** > **Bots** > **Configure Super Bot Fight Mode
Security** > **Bots** > **Configure Bot Management** | +| [Auto-update machine learning model](/bots/reference/machine-learning-models/) | **Security** > **Bots** > **Configure Bot Management** | +| [Enable Security.txt](/security-center/infrastructure/security-file/) | **Security** > **Settings** | +| [Challenge Passage](/waf/tools/challenge-passage/) | **Security** > **Settings** | +| [Browser Integrity Check](/waf/tools/browser-integrity-check/) | **Security** > **Settings** | +| [Replace insecure JavaScript libraries](/waf/tools/replace-insecure-js-libraries/) | **Security** > **Settings** | +| [Security Level](/waf/tools/security-level/) | **Security** > **Settings** | diff --git a/src/content/partials/bots/get-started-pro-biz-steps.mdx b/src/content/partials/bots/get-started-pro-biz-steps.mdx index 93627eb769bf5b..9b4b1c98afb57c 100644 --- a/src/content/partials/bots/get-started-pro-biz-steps.mdx +++ b/src/content/partials/bots/get-started-pro-biz-steps.mdx @@ -1,6 +1,5 @@ --- {} - --- To start using Super Bot Fight Mode: @@ -8,10 +7,12 @@ To start using Super Bot Fight Mode: 1. Log in to the [Cloudflare dashboard](https://dash.cloudflare.com/login) and select your account and domain. 2. Go to **Security** > **Bots**. 3. Select **Configure Super Bot Fight Mode**. -4. Choose how your domain should respond to various types of traffic: - * For more details on verified bots, refer to [Verified Bots](/bots/concepts/bot/#verified-bots). - * For more details on supported file types, refer to [Static resource protection](/bots/reference/static-resources/) - * For more details on invisible code injection, refer to [JavaScript detections](/bots/reference/javascript-detections/). +4. + Choose how your domain should respond to various types of traffic: + + - For more details on verified bots, refer to [Verified Bots](/bots/concepts/bot/#verified-bots). + - For more details on supported file types, refer to [Static resource protection](/bots/reference/static-resources/) + For more details on invisible code injection, refer to [JavaScript detections](/bots/reference/javascript-detections/). :::caution[Warning] From 0a957d373562a81d002dddfb8e4c05cf445fbc32 Mon Sep 17 00:00:00 2001 From: Pedro Sousa <680496+pedrosousa@users.noreply.github.com> Date: Wed, 19 Mar 2025 19:08:31 +0000 Subject: [PATCH 2/2] Small fixes --- src/content/partials/bots/get-started-pro-biz-steps.mdx | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/src/content/partials/bots/get-started-pro-biz-steps.mdx b/src/content/partials/bots/get-started-pro-biz-steps.mdx index 9b4b1c98afb57c..43d2fdfb687a41 100644 --- a/src/content/partials/bots/get-started-pro-biz-steps.mdx +++ b/src/content/partials/bots/get-started-pro-biz-steps.mdx @@ -11,8 +11,8 @@ To start using Super Bot Fight Mode: Choose how your domain should respond to various types of traffic: - For more details on verified bots, refer to [Verified Bots](/bots/concepts/bot/#verified-bots). - - For more details on supported file types, refer to [Static resource protection](/bots/reference/static-resources/) - For more details on invisible code injection, refer to [JavaScript detections](/bots/reference/javascript-detections/). + - For more details on supported file types, refer to [Static resource protection](/bots/reference/static-resources/). + - For more details on invisible code injection, refer to [JavaScript detections](/bots/reference/javascript-detections/). :::caution[Warning]