Modernizing WAF: What Today's Applications Actually Need