cloudflare Mar 4, 2026 Always-on detections: eliminating the WAF “log versus block” trade-off (opens in new tab) web-application-firewallsql-injectioncross-site-scriptingattack-signature-detectionsecurity-analyticsremote-code-executioncloudflare-managed-rulesetfalse-positives