---
title: cf.waf.content_scan.obj_types · Cloudflare Ruleset Engine docs
description: An array of file types in the order the content objects were detected in the request.
source_url:
  html: https://rest-api-guide.preview.developers.cloudflare.com/ruleset-engine/rules-language/fields/reference/cf.waf.content_scan.obj_types/index.md
  md: https://rest-api-guide.preview.developers.cloudflare.com/ruleset-engine/rules-language/fields/reference/cf.waf.content_scan.obj_types/
---

# cf.waf.content\_scan.obj\_types

`cf.waf.content_scan.obj_types` Array\<String>

An array of file types in the order the content objects were detected in the request.

If Cloudflare cannot determine the file type of a content object, the corresponding value in the `obj_types` array will be `application/octet-stream`.

Requires a Cloudflare Enterprise plan with [malicious uploads detection](https://developers.cloudflare.com/waf/detections/malicious-uploads/).

Categories:

* Request
