Block data entry in Browser Isolation but keep search, copy and zoom (beta)

Hi everyone, it's Shiichan! This setting helps when you want to stop typing but not get in the way of reading.

Cloudflare Changelog developers.cloudflare.com

What was announced?

According to Cloudflare's Changelog, isolation policies in Browser Isolation now have a third keyboard option in beta: Allow read-only actions.

The story so far

The keyboard setting used to be binary:

• Allow all input
• Block everything

Blocking everything also took away reading essentials such as find in page and zoom, which was inconvenient.

What changes

With Allow read-only actions, you can block data entry while preserving built-in browser actions. These keep working:

• Find in page
• Select all
• Copy
• Print
• Zoom

All other keyboard input is blocked from reaching the isolated page.

Dive Deep

Copy and print remain subject to their own policy settings. The controls compose instead of overriding each other.

For example, setting the keyboard to Allow read-only actions and copy to Do not allow lets users search and zoom but prevents them from copying content.

There are two ways to set it up:

• Dashboard: set Keyboard to Allow read-only actions in your isolation policy settings
• API: in the biso_admin_controls object, set version to v2 and keyboard to enable_read_only_actions

See the Keyboard docs for details.

Wrap-up

• The keyboard setting gains Allow read-only actions (beta)
• Find, select all, copy, print and zoom work, and other input is blocked
• Copy and print combine with their own policy settings
• In the API, use enable_read_only_actions with version set to v2

This is for Zero Trust admins who want view-only access to business tools or want to limit data leakage!