#XSS #WAF #bypass? https://t.co/bmWqaHpFVh