https://www.secjuice.com/web-application-firewall-waf-evasion/https://www.cnblogs.com/hyit/articles/11865185.html
