@sysbraykr just discovered a cool way to bypass XSS WAFs using Location concatenation! Check it out here: https://twitter.com/sysbraykr/status/1656632680417726465