WAFs are a good measure but they probably won’t save you. Focus on the root problem. Of course you can also update your AWS WAF rules to address this bypass but that will be a never ending game. https://t.co/kxCGhJJZnB