The WAF blocks “<whatever” and “%3Cwhatever”. How would you bypass it to inject in the context <tr>HERE</tr>?