I have long argued that #waf is just a simple screen that masks the underlying application #security defects. A simple comment was all it took to bypass #cloudflare #waf to exploit #sqli https://t.co/1Qd55poe9b