WAF rules
SQL injection, XSS, path traversal, and command injection patterns are each checked
The WAF, short for web application firewall, looks for the tell-tale signs of a handful of common attack types: SQL injection, cross-site scripting, path traversal, and command injection.
These are some of the most frequent ways attackers try to abuse a website.