What changed
A value you may have hardcoded is now rejected.
Affects POST /accounts/{account_id}/urlscanner/scan.
no longer accepts "AD", "AF", "AG", "BA", "BI", "BJ", "BM", "BS", "BZ", "CF", "CG", "CN", "CU", "CV", "DM", "ER", "FM", "GA", "GL", "GM", "GN", "GQ", "GW", "IR", "KI", "KM", "KN", "KP", "KY", "LC", "LI", "LS", "LY", "MC", "ML", "MR", "MS", "NE", "NI", "NR", "PG", "SB", "SC", "SD", "SH", "SL", "SM", "SO", "SS", "ST", "SV", "SY", "SZ", "TD", "TG", "TL", "TM", "TO", "UY", "VC", "VE", "VU", "WS", "YE"
Who is affected
Code that sends POST /accounts/{account_id}/urlscanner/scan (country).
Before and after
| Where | Before | After |
|---|---|---|
| POST /accounts/{account_id}/urlscanner/scan · country | "AD", "AE", "AF", "AG", "AL", "AM", "AO", "AR", "AT", "AU", "AZ", "BA", "BB", "BD", "BE", "BF", "BG", "BH", "BI", "BJ", "BM", "BN", "BO", "BR", "BS", "BT", "BW", "BY", "BZ", "CA", "CD", "CF", "CG", "CH", "CI", "CL", "CM", "CN", "CO", "CR", "CU", "CV", "CY", "CZ", "DE", "DJ", "DK", "DM", "DO", "DZ", "EC", "EE", "EG", "ER", "ES", "ET", "FI", "FJ", "FM", "FR", "GA", "GB", "GD", "GE", "GH", "GL", "GM", "GN", "GQ", "GR", "GT", "GW", "GY", "HN", "HR", "HT", "HU", "ID", "IE", "IL", "IN", "IQ", "IR", "IS", "IT", "JM", "JO", "JP", "KE", "KG", "KH", "KI", "KM", "KN", "KP", "KR", "KW", "KY", "KZ", "LA", "LB", "LC", "LI", "LK", "LR", "LS", "LT", "LU", "LV", "LY", "MA", "MC", "MD", "MG", "MK", "ML", "MM", "MN", "MO", "MR", "MS", "MU", "MV", "MW", "MX", "MY", "MZ", "NA", "NE", "NG", "NI", "NL", "NO", "NP", "NR", "NZ", "OM", "PA", "PE", "PG", "PH", "PK", "PL", "PS", "PT", "PY", "QA", "RO", "RS", "RU", "RW", "SA", "SB", "SC", "SD", "SE", "SH", "SI", "SK", "SL", "SM", "SN", "SO", "SR", "SS", "ST", "SV", "SY", "SZ", "TD", "TG", "TH", "TJ", "TL", "TM", "TN", "TO", "TR", "TT", "TW", "TZ", "UA", "UG", "US", "UY", "UZ", "VC", "VE", "VN", "VU", "WS", "YE", "ZA", "ZM", "ZW" | "AE", "AL", "AM", "AO", "AR", "AT", "AU", "AZ", "BB", "BD", "BE", "BF", "BG", "BH", "BN", "BO", "BR", "BT", "BW", "BY", "CA", "CD", "CH", "CI", "CL", "CM", "CO", "CR", "CW", "CY", "CZ", "DE", "DJ", "DK", "DO", "DZ", "EC", "EE", "EG", "ES", "ET", "FI", "FJ", "FR", "GB", "GD", "GE", "GH", "GR", "GT", "GU", "GY", "HK", "HN", "HR", "HT", "HU", "ID", "IE", "IL", "IN", "IQ", "IS", "IT", "JM", "JO", "JP", "KE", "KG", "KH", "KR", "KW", "KZ", "LA", "LB", "LK", "LR", "LT", "LU", "LV", "MA", "MD", "MG", "MK", "MM", "MN", "MO", "MT", "MU", "MV", "MW", "MX", "MY", "MZ", "NA", "NC", "NG", "NL", "NO", "NP", "NZ", "OM", "PA", "PE", "PF", "PH", "PK", "PL", "PR", "PS", "PT", "PY", "QA", "RE", "RO", "RS", "RU", "RW", "SA", "SE", "SG", "SI", "SK", "SN", "SR", "TH", "TJ", "TN", "TR", "TT", "TW", "TZ", "UA", "UG", "US", "UZ", "VN", "ZA", "ZM", "ZW" |
| POST /accounts/{account_id}/urlscanner/v2/scan · country | "AD", "AE", "AF", "AG", "AL", "AM", "AO", "AR", "AT", "AU", "AZ", "BA", "BB", "BD", "BE", "BF", "BG", "BH", "BI", "BJ", "BM", "BN", "BO", "BR", "BS", "BT", "BW", "BY", "BZ", "CA", "CD", "CF", "CG", "CH", "CI", "CL", "CM", "CN", "CO", "CR", "CU", "CV", "CY", "CZ", "DE", "DJ", "DK", "DM", "DO", "DZ", "EC", "EE", "EG", "ER", "ES", "ET", "FI", "FJ", "FM", "FR", "GA", "GB", "GD", "GE", "GH", "GL", "GM", "GN", "GQ", "GR", "GT", "GW", "GY", "HN", "HR", "HT", "HU", "ID", "IE", "IL", "IN", "IQ", "IR", "IS", "IT", "JM", "JO", "JP", "KE", "KG", "KH", "KI", "KM", "KN", "KP", "KR", "KW", "KY", "KZ", "LA", "LB", "LC", "LI", "LK", "LR", "LS", "LT", "LU", "LV", "LY", "MA", "MC", "MD", "MG", "MK", "ML", "MM", "MN", "MO", "MR", "MS", "MU", "MV", "MW", "MX", "MY", "MZ", "NA", "NE", "NG", "NI", "NL", "NO", "NP", "NR", "NZ", "OM", "PA", "PE", "PG", "PH", "PK", "PL", "PS", "PT", "PY", "QA", "RO", "RS", "RU", "RW", "SA", "SB", "SC", "SD", "SE", "SH", "SI", "SK", "SL", "SM", "SN", "SO", "SR", "SS", "ST", "SV", "SY", "SZ", "TD", "TG", "TH", "TJ", "TL", "TM", "TN", "TO", "TR", "TT", "TW", "TZ", "UA", "UG", "US", "UY", "UZ", "VC", "VE", "VN", "VU", "WS", "YE", "ZA", "ZM", "ZW" | "AE", "AL", "AM", "AO", "AR", "AT", "AU", "AZ", "BB", "BD", "BE", "BF", "BG", "BH", "BN", "BO", "BR", "BT", "BW", "BY", "CA", "CD", "CH", "CI", "CL", "CM", "CO", "CR", "CW", "CY", "CZ", "DE", "DJ", "DK", "DO", "DZ", "EC", "EE", "EG", "ES", "ET", "FI", "FJ", "FR", "GB", "GD", "GE", "GH", "GR", "GT", "GU", "GY", "HK", "HN", "HR", "HT", "HU", "ID", "IE", "IL", "IN", "IQ", "IS", "IT", "JM", "JO", "JP", "KE", "KG", "KH", "KR", "KW", "KZ", "LA", "LB", "LK", "LR", "LT", "LU", "LV", "MA", "MD", "MG", "MK", "MM", "MN", "MO", "MT", "MU", "MV", "MW", "MX", "MY", "MZ", "NA", "NC", "NG", "NL", "NO", "NP", "NZ", "OM", "PA", "PE", "PF", "PH", "PK", "PL", "PR", "PS", "PT", "PY", "QA", "RE", "RO", "RS", "RU", "RW", "SA", "SE", "SG", "SI", "SK", "SN", "SR", "TH", "TJ", "TN", "TR", "TT", "TW", "TZ", "UA", "UG", "US", "UZ", "VN", "ZA", "ZM", "ZW" |
Code that breaks
// sending "AD" for country is now rejected // sending "AF" for country is now rejected // sending "AG" for country is now rejected // sending "BA" for country is now rejected // sending "BI" for country is now rejected // sending "BJ" for country is now rejected // sending "BM" for country is now rejected // sending "BS" for country is now rejected // sending "BZ" for country is now rejected // sending "CF" for country is now rejected // sending "CG" for country is now rejected // sending "CN" for country is now rejected // sending "CU" for country is now rejected // sending "CV" for country is now rejected // sending "DM" for country is now rejected // sending "ER" for country is now rejected // sending "FM" for country is now rejected // sending "GA" for country is now rejected // sending "GL" for country is now rejected // sending "GM" for country is now rejected // sending "GN" for country is now rejected // sending "GQ" for country is now rejected // sending "GW" for country is now rejected // sending "IR" for country is now rejected // sending "KI" for country is now rejected // sending "KM" for country is now rejected // sending "KN" for country is now rejected // sending "KP" for country is now rejected // sending "KY" for country is now rejected // sending "LC" for country is now rejected // sending "LI" for country is now rejected // sending "LS" for country is now rejected // sending "LY" for country is now rejected // sending "MC" for country is now rejected // sending "ML" for country is now rejected // sending "MR" for country is now rejected // sending "MS" for country is now rejected // sending "NE" for country is now rejected // sending "NI" for country is now rejected // sending "NR" for country is now rejected // sending "PG" for country is now rejected // sending "SB" for country is now rejected // sending "SC" for country is now rejected // sending "SD" for country is now rejected // sending "SH" for country is now rejected // sending "SL" for country is now rejected // sending "SM" for country is now rejected // sending "SO" for country is now rejected // sending "SS" for country is now rejected // sending "ST" for country is now rejected // sending "SV" for country is now rejected // sending "SY" for country is now rejected // sending "SZ" for country is now rejected // sending "TD" for country is now rejected // sending "TG" for country is now rejected // sending "TL" for country is now rejected // sending "TM" for country is now rejected // sending "TO" for country is now rejected // sending "UY" for country is now rejected // sending "VC" for country is now rejected // sending "VE" for country is now rejected // sending "VU" for country is now rejected // sending "WS" for country is now rejected // sending "YE" for country is now rejected
Based on Cloudflare’s published API specification. How severity is decided.