WAF blocks the obvious payload but a normalized path still reaches the backend through an alternate route

The rule looks effective in one test, yet another path representation slips through because proxy and WAF normalize differently.