What changed
A value you may have hardcoded is now rejected.
Affects rulesets_RulesetPhase reachable from 8 operations.
no longer accepts "http_response_firewall_custom"
Who is affected
Code that sends Cloudflare's rulesets_RulesetPhase objects, used by 8 Cloudflare operations.
Before and after
| Where | Before | After |
|---|---|---|
| rulesets_RulesetPhase | "ddos_l4", "ddos_l7", "http_config_settings", "http_custom_errors", "http_log_custom_fields", "http_ratelimit", "http_request_cache_settings", "http_request_dynamic_redirect", "http_request_firewall_custom", "http_request_firewall_managed", "http_request_late_transform", "http_request_origin", "http_request_redirect", "http_request_sanitize", "http_request_sbfm", "http_request_transform", "http_response_cache_settings", "http_response_compression", "http_response_firewall_custom", "http_response_firewall_managed", "http_response_headers_transform", "magic_transit", "magic_transit_ids_managed", "magic_transit_managed", "magic_transit_ratelimit" | "ddos_l4", "ddos_l7", "http_config_settings", "http_custom_errors", "http_log_custom_fields", "http_ratelimit", "http_request_cache_settings", "http_request_dynamic_redirect", "http_request_firewall_custom", "http_request_firewall_managed", "http_request_late_transform", "http_request_origin", "http_request_redirect", "http_request_sanitize", "http_request_sbfm", "http_request_transform", "http_response_cache_settings", "http_response_compression", "http_response_firewall_managed", "http_response_headers_transform", "magic_transit", "magic_transit_ids_managed", "magic_transit_managed", "magic_transit_ratelimit" |
Code that breaks
// sending "http_response_firewall_custom" for undefined is now rejected
Based on Cloudflare’s published API specification. How severity is decided.