A blogpost has been created about a DOM-based XSS bypass for Cloudflare WAF using the payload '-alert?.(1)-'. Check out the writeup for more technical details: https://t.co/18J2gevAPC
Check out the original tweet here: https://twitter.com/0x0SojalSec/status/1879618676821000534