Web Application Firewalls (WAFs) are the first line of defense for countless online services, yet a new approach—dubbed WAFFLED—demonstrates how subtle parsing mismatches can let malicious traffic slip through.
Researchers at Northeastern University and Dartmouth College have unveiled a systematic method that exploits differences...