Cloudflare analyzes the JavaScript dependencies in the pages of your domain over time.
Cloudflare parses each script into an abstract syntax tree (AST) and hashes its structure. A script is marked as changed when this structural hash changes.
The comparison does not use the raw file bytes. Changes that preserve the same AST structure, such as formatting changes or changing only numeric literal values, do not trigger a code change alert.
You can configure a notification for code change alerts to receive a daily notification about changed scripts in your domain.
When you receive such a notification:
-
In the Cloudflare dashboard, go to the Web assets page.
Go to Web assets ↗ -
Select the Client-side resources tab.
-
Check the details of each changed script and validate if it is an expected change.