Driftwatch

Cloudflare / Cloudflare API /

Breakingdirection flip: their tools call this safe

Response values are no longer constrained

What changed

The documented set of values is gone, so anything can appear. Every exhaustive switch and generated enum over this field is now incomplete.

Affects GET /accounts/{account_id}/shares.

any value can now appear

Who is affected

Code that reads GET /accounts/{account_id}/shares (result).

Before and after

WhereBeforeAfter
GET /accounts/{account_id}/shares · resultnullabsent
POST /accounts/{account_id}/shares · resultnullabsent
GET /accounts/{account_id}/shares/{share_id} · resultnullabsent
PUT /accounts/{account_id}/shares/{share_id} · resultnullabsent
DELETE /accounts/{account_id}/shares/{share_id} · resultnullabsent
GET /accounts/{account_id}/shares/{share_id}/excluded-recipients · resultnullabsent
PUT /accounts/{account_id}/shares/{share_id}/excluded-recipients · resultnullabsent
POST /accounts/{account_id}/shares/{share_id}/excluded-recipients · resultnullabsent
GET /accounts/{account_id}/shares/{share_id}/excluded-recipients/{excluded_recipient_id} · resultnullabsent
DELETE /accounts/{account_id}/shares/{share_id}/excluded-recipients/{excluded_recipient_id} · resultnullabsent
GET /accounts/{account_id}/shares/{share_id}/recipients · resultnullabsent
PUT /accounts/{account_id}/shares/{share_id}/recipients · resultnullabsent
POST /accounts/{account_id}/shares/{share_id}/recipients · resultnullabsent
GET /accounts/{account_id}/shares/{share_id}/recipients/{recipient_id} · resultnullabsent
DELETE /accounts/{account_id}/shares/{share_id}/recipients/{recipient_id} · resultnullabsent
GET /accounts/{account_id}/shares/{share_id}/resources · resultnullabsent
POST /accounts/{account_id}/shares/{share_id}/resources · resultnullabsent
GET /accounts/{account_id}/shares/{share_id}/resources/{share_resource_id} · resultnullabsent
PUT /accounts/{account_id}/shares/{share_id}/resources/{share_resource_id} · resultnullabsent
DELETE /accounts/{account_id}/shares/{share_id}/resources/{share_resource_id} · resultnullabsent
GET /organizations/{organization_id}/shares · resultnullabsent

Based on Cloudflare’s published API specification. How severity is decided.