A WAF custom rule matches on decoded path segments, but the reverse proxy evaluates the raw form and one legacy route stays bypassable

Both layers inspect the request, yet they do not interpret the path in the same representation.