WAF bypass by @theXSSrat
https://t.co/7nhwmii9YR