If the entire URL is reflected unfiltered in href value, split the payload in different parameters to bypass the WAF

#BugBounty #bugbountytips https://t.co/tRRovit3iT