cloudflare Mar 4, 2026 Always-on detections: eliminating the WAF “log versus block” trade-off (opens in new tab) web-application-firewallsql-injectionattack-signature-detectionsecurity-analyticscross-site-scriptingremote-code-executioncloudflare-managed-rulesetfalse-positives