Add blog post: WAF Configuration Security Issue