The tweet mentions a bypass for XSS WAF rules by using a payload 'x=xxxxx' with many 'x' values to trigger XSS. It is recommended to understand the impact of this bypass and take necessary measures to mitigate the risk.