A bypass for a WAF in HTML scenario has been discovered for XSS vulnerability. The payload used for bypass is <A HRef=\" AutoFocus OnFocus=top/**/?.['al'%2B'ert'](1)>. This bypass makes XSS attacks easy. More details can be found in the tweet by @KN0X55. Sign up now! https://t.co/nNqODwzUC0