WAF - Leaked credentials detection now scans Authorization headers
Leaked credentials detection now scans the Authorization request header for Basic Authentication credentials. Previously, the detection only inspected request bodies, query strings, and headers for well-known web applications or custom detection locations, which meant credentials sent through HTTP Basic Authentication were not covered by default. This new default scan location decodes the Authorization: Basic <credentials> header and compares the extracted username and password against Cloudflar
