Cloudflare adds response blocking to its web application firewall

Cloudflare announced generally available firewall capabilities that evaluate web requests alongside application responses and can block a response before it reaches the requester. The capabilities cover all plans, including Free, for sites routing traffic through Cloudflare. The first managed protections target php2shell. Customers can also create up to three custom response rules with logging and blocking actions. Pairing suspicious input with response signals can help identify successful exploitation, rather than just an attempted attack. Blocking a response cannot undo actions already performed at the application server. Customers cannot yet create rules directly on response bodies.