[selcuka]

In real world, as a developer you can't control what IT uses for WAF, so you may have to work around it as much as you can.

At a previous job the IT set up a spam filter which used a keyword list (dumb attempt anyway), but it also searched the email headers (not only the body). As a result, we weren't able to receive email if one of the SMTP hops was named, say, smtp.essex.company.com.

[jasonjayr]

Ah, a clbuttic mistake!

[Too]

If you work as a developer and can’t do your job because of a dumb pattern matching WAF out of your control, you should find yourself a new job or set up a parallel IT infrastructure.

[thebiss]

The infamous Scunthorpe problem.

https://en.wikipedia.org/wiki/Scunthorpe_problem