How Cloudflare's firewall blocked the PHP flaws before they were public
The PHP flaws leaked before their official release, and the incoming request alone does not always show whether it is an attack.
A new firewall feature that checks the request and the server's response together, and can block a bad response before it reaches the attacker.