Engineering Insights

Data Loss Prevention - Detect and sanitize HAR files

HTTP Archive (HAR) files are used by engineering and support teams to capture and share web traffic logs for troubleshooting. However, these files routinely contain highly sensitive data — including session cookies, authorization headers, and other credentials — that can pose a significant risk if uploaded to third-party services without being reviewed or cleaned first. Gateway now includes a predefined DLP profile called Unsanitized HAR that detects HAR files in HTTP traffic. You can use this p

logpush, Logs - Logpush — More granular timestamps

Logpush now supports higher-precision timestamp formats for log output. You can configure jobs to output timestamps at millisecond or nanosecond precision. This is available in both the Logpush UI in the Cloudflare dashboard and the Logpush API. To use the new formats, set timestamp_format in your Logpush job's output_options: rfc3339ms — 2024-02-17T23:52:01.123Z rfc3339ns — 2024-02-17T23:52:01.123456789Z Default timestamp formats apply unless explicitly set. The dashboard defaults to rfc3339 an

Rules - New mTLS certificate fields for Transform Rules

Cloudflare now exposes four new fields in the Transform Rules phase that encode client certificate data in RFC 9440 format. Previously, forwarding client certificate information to your origin required custom parsing of PEM-encoded fields or non-standard HTTP header formats. These new fields produce output in the standardized Client-Cert and Client-Cert-Chain header format defined by RFC 9440, so your origin can consume them directly without any additional decoding logic. Each certificate is DER

Workers - Declare required secrets in your Wrangler configuration

The new secrets configuration property lets you declare the secret names your Worker requires in your Wrangler configuration file. Required secrets are validated during local development and deploy, and used as the source of truth for type generation. wrangler.jsonc { "secrets": { "required": ["API_KEY", "DB_PASSWORD"], }, } wrangler.toml [secrets] required = [ "API_KEY", "DB_PASSWORD" ] Local development When secrets is defined, wrangler dev and vite d

Introducing the OpenAI Safety Bug Bounty program

OpenAI launches a Safety Bug Bounty program to identify AI abuse and safety risks, including agentic vulnerabilities, prompt injection, and data exfiltration.

Developing a minimally HashDoS resistant, yet quickly reversible integer hash for V8

Node.js 25.8.2 (Current)

Node.js 24.14.1 (LTS)