cloudflare Mar 4, 2026 Always-on detections: eliminating the WAF “log versus block” trade-off (opens in new tab) web-application-firewallattack-signature-detectionsecurity-analyticssql-injectioncross-site-scriptingremote-code-executioncloudflare-managed-rulesetfalse-positives