WAF Release - Scheduled changes for 2026-08-24
| Announcement Date | Release Date | Release Behavior | Legacy Rule ID | Rule ID | Description | Comments |
|---|---|---|---|---|---|---|
| 2026-08-17 | 2026-08-24 | Log | N/A | HTTP/2 Request Smuggling - Request Body Anomaly | This is a new detection. | |
| 2026-08-17 | 2026-08-24 | Log | N/A | XSS - JavaScript Event Handler Coercion - Headers | This is a new detection. | |
| 2026-08-17 | 2026-08-24 | Log | N/A | XSS - JavaScript Event Handler Coercion - Body | This is a new detection. | |
| 2026-08-17 | 2026-08-24 | Log | N/A | XSS - JavaScript Event Handler Coercion - URI | This is a new detection. | |
| 2026-08-17 | 2026-08-24 | Log | N/A | XSS, HTML Injection - Script Tag - Beta | This rule will be merged into the original rule "XSS, HTML Injection - Script Tag" (ID: |
For other WAF updates, refer to the changelog.