--- title: Page Shield --- [Skip to content](#_top) [API Reference](https://developers.cloudflare.com/api) Copy Markdown Open in **Claude**Open in **ChatGPT**Open in **Cursor** --- **Copy Markdown****View as Markdown** # Page Shield ##### [Get client-side security settings](https://developers.cloudflare.com/api/resources/page_shield/methods/get) GET/zones/{zone\_id}/page\_shield ##### [Update client-side security settings](https://developers.cloudflare.com/api/resources/page_shield/methods/update) PUT/zones/{zone\_id}/page\_shield ##### ModelsExpand Collapse

PageShieldGetResponse object {enabled, updated\_at, use\_cloudflare\_reporting\_endpoint, use\_connection\_url\_path }

enabled: boolean When true, indicates that Client-Side Security is enabled. Link to this property updated\_at: string The timestamp of when Client-Side Security was last updated. Link to this property use\_cloudflare\_reporting\_endpoint: boolean When true, CSP reports will be sent to https://csp-reporting.cloudflare.com/cdn-cgi/script\_monitor/report Link to this property use\_connection\_url\_path: boolean When true, the paths associated with connections URLs will also be analyzed. Link to this property

[Link to this property](<#(resource)%20page_shield%20%3E%20(model)%20page_shield_get_response%20%3E%20(schema)>)

PageShieldUpdateResponse object {enabled, updated\_at, use\_cloudflare\_reporting\_endpoint, use\_connection\_url\_path }

[Link to this property](<#(resource)%20page_shield%20%3E%20(model)%20page_shield_update_response%20%3E%20(schema)>) #### Page ShieldPolicies ##### [List content security rules](https://developers.cloudflare.com/api/resources/page_shield/subresources/policies/methods/list) GET/zones/{zone\_id}/page\_shield/policies ##### [Get a content security rule](https://developers.cloudflare.com/api/resources/page_shield/subresources/policies/methods/get) GET/zones/{zone\_id}/page\_shield/policies/{policy\_id} ##### [Create a content security rule](https://developers.cloudflare.com/api/resources/page_shield/subresources/policies/methods/create) POST/zones/{zone\_id}/page\_shield/policies ##### [Update a content security rule](https://developers.cloudflare.com/api/resources/page_shield/subresources/policies/methods/update) PUT/zones/{zone\_id}/page\_shield/policies/{policy\_id} ##### [Delete a content security rule](https://developers.cloudflare.com/api/resources/page_shield/subresources/policies/methods/delete) DELETE/zones/{zone\_id}/page\_shield/policies/{policy\_id} ##### ModelsExpand Collapse

PolicyListResponse object {id, action, description, 3 more }

id: string Identifier maxLength32 Link to this property

action: "allow"or "log"or "add\_reporting\_directives" The action to take if the expression matches

One of the following: "allow" Link to this property "log" Link to this property "add\_reporting\_directives" Link to this property

Link to this property description: string A description for the policy Link to this property enabled: boolean Whether the policy is enabled Link to this property expression: string The expression which must match for the policy to be applied, using the Cloudflare Firewall rule expression syntax Link to this property value: string The policy which will be applied Link to this property

[Link to this property](<#(resource)%20page_shield.policies%20%3E%20(model)%20policy_list_response%20%3E%20(schema)>)

PolicyGetResponse object {id, action, description, 3 more }

id: string Identifier maxLength32 Link to this property

action: "allow"or "log"or "add\_reporting\_directives" The action to take if the expression matches

One of the following: "allow" Link to this property "log" Link to this property "add\_reporting\_directives" Link to this property

[Link to this property](<#(resource)%20page_shield.policies%20%3E%20(model)%20policy_get_response%20%3E%20(schema)>)

PolicyCreateResponse object {id, action, description, 3 more }

id: string Identifier maxLength32 Link to this property

action: "allow"or "log"or "add\_reporting\_directives" The action to take if the expression matches

One of the following: "allow" Link to this property "log" Link to this property "add\_reporting\_directives" Link to this property

[Link to this property](<#(resource)%20page_shield.policies%20%3E%20(model)%20policy_create_response%20%3E%20(schema)>)

PolicyUpdateResponse object {id, action, description, 3 more }

id: string Identifier maxLength32 Link to this property

action: "allow"or "log"or "add\_reporting\_directives" The action to take if the expression matches

One of the following: "allow" Link to this property "log" Link to this property "add\_reporting\_directives" Link to this property

[Link to this property](<#(resource)%20page_shield.policies%20%3E%20(model)%20policy_update_response%20%3E%20(schema)>) #### Page ShieldConnections ##### [List detected connections](https://developers.cloudflare.com/api/resources/page_shield/subresources/connections/methods/list) GET/zones/{zone\_id}/page\_shield/connections ##### [Get a detected connection](https://developers.cloudflare.com/api/resources/page_shield/subresources/connections/methods/get) GET/zones/{zone\_id}/page\_shield/connections/{connection\_id} ##### ModelsExpand Collapse

ConnectionListResponse object {id, added\_at, first\_seen\_at, 10 more }

[Link to this property](<#(resource)%20page_shield.connections%20%3E%20(model)%20connection_list_response%20%3E%20(schema)>)

ConnectionGetResponse object {id, added\_at, first\_seen\_at, 10 more }

[Link to this property](<#(resource)%20page_shield.connections%20%3E%20(model)%20connection_get_response%20%3E%20(schema)>) #### Page ShieldScripts ##### [List detected scripts](https://developers.cloudflare.com/api/resources/page_shield/subresources/scripts/methods/list) GET/zones/{zone\_id}/page\_shield/scripts ##### [Get a detected script](https://developers.cloudflare.com/api/resources/page_shield/subresources/scripts/methods/get) GET/zones/{zone\_id}/page\_shield/scripts/{script\_id} ##### ModelsExpand Collapse

ScriptListResponse object {id, added\_at, first\_seen\_at, 18 more }

id: string Identifier maxLength32 Link to this property added\_at: string formatdate-time Link to this property first\_seen\_at: string formatdate-time Link to this property host: string Link to this property last\_seen\_at: string formatdate-time Link to this property url: string Link to this property url\_contains\_cdn\_cgi\_path: boolean Link to this property cryptomining\_score: optional number The cryptomining score of the JavaScript content. maximum99 minimum1 Link to this property Deprecateddataflow\_score: optional number The dataflow score of the JavaScript content. This field has been deprecated in favour of js\_integrity\_score. maximum99 minimum1 Link to this property domain\_reported\_malicious: optional boolean Link to this property fetched\_at: optional string The timestamp of when the script was last fetched. Link to this property first\_page\_url: optional string Link to this property hash: optional string The computed hash of the analyzed script. maxLength64 minLength64 Link to this property js\_integrity\_score: optional number The integrity score of the JavaScript content. maximum99 minimum1 Link to this property magecart\_score: optional number The magecart score of the JavaScript content. maximum99 minimum1 Link to this property malicious\_domain\_categories: optional array of string Link to this property malicious\_url\_categories: optional array of string Link to this property malware\_score: optional number The malware score of the JavaScript content. maximum99 minimum1 Link to this property Deprecatedobfuscation\_score: optional number The obfuscation score of the JavaScript content. This field has been deprecated in favour of js\_integrity\_score. maximum99 minimum1 Link to this property page\_urls: optional array of string Link to this property url\_reported\_malicious: optional boolean Link to this property

[Link to this property](<#(resource)%20page_shield.scripts%20%3E%20(model)%20script_list_response%20%3E%20(schema)>)

ScriptGetResponse object {id, added\_at, first\_seen\_at, 19 more }

versions: optional array of object {cryptomining\_score, dataflow\_score, fetched\_at, 5 more }

cryptomining\_score: optional number The cryptomining score of the JavaScript content. maximum99 minimum1 Link to this property Deprecateddataflow\_score: optional number The dataflow score of the JavaScript content. This field has been deprecated in favour of js\_integrity\_score. maximum99 minimum1 Link to this property fetched\_at: optional string The timestamp of when the script was last fetched. Link to this property hash: optional string The computed hash of the analyzed script. maxLength64 minLength64 Link to this property js\_integrity\_score: optional number The integrity score of the JavaScript content. maximum99 minimum1 Link to this property magecart\_score: optional number The magecart score of the JavaScript content. maximum99 minimum1 Link to this property malware\_score: optional number The malware score of the JavaScript content. maximum99 minimum1 Link to this property Deprecatedobfuscation\_score: optional number The obfuscation score of the JavaScript content. This field has been deprecated in favour of js\_integrity\_score. maximum99 minimum1 Link to this property

Link to this property

[Link to this property](<#(resource)%20page_shield.scripts%20%3E%20(model)%20script_get_response%20%3E%20(schema)>) #### Page ShieldCookies ##### [List detected cookies](https://developers.cloudflare.com/api/resources/page_shield/subresources/cookies/methods/list) GET/zones/{zone\_id}/page\_shield/cookies ##### [Get a detected cookie](https://developers.cloudflare.com/api/resources/page_shield/subresources/cookies/methods/get) GET/zones/{zone\_id}/page\_shield/cookies/{cookie\_id} ##### ModelsExpand Collapse

CookieListResponse object {id, first\_seen\_at, host, 11 more }

id: string Identifier maxLength32 Link to this property first\_seen\_at: string formatdate-time Link to this property host: string Link to this property last\_seen\_at: string formatdate-time Link to this property name: string Link to this property

type: "first\_party"or "unknown"

One of the following: "first\_party" Link to this property "unknown" Link to this property

Link to this property domain\_attribute: optional string Link to this property expires\_attribute: optional string formatdate-time Link to this property http\_only\_attribute: optional boolean Link to this property max\_age\_attribute: optional number Link to this property page\_urls: optional array of string Link to this property path\_attribute: optional string Link to this property

same\_site\_attribute: optional "lax"or "strict"or "none"

One of the following: "lax" Link to this property "strict" Link to this property "none" Link to this property

Link to this property secure\_attribute: optional boolean Link to this property

[Link to this property](<#(resource)%20page_shield.cookies%20%3E%20(model)%20cookie_list_response%20%3E%20(schema)>)

CookieGetResponse object {id, first\_seen\_at, host, 11 more }

type: "first\_party"or "unknown"

One of the following: "first\_party" Link to this property "unknown" Link to this property

same\_site\_attribute: optional "lax"or "strict"or "none"

One of the following: "lax" Link to this property "strict" Link to this property "none" Link to this property

Link to this property secure\_attribute: optional boolean Link to this property

[Link to this property](<#(resource)%20page_shield.cookies%20%3E%20(model)%20cookie_get_response%20%3E%20(schema)>)