Cloudflare's October 21st WAF release correlates HTTP requests with origin responses, adding exploit-confirmation detections and response rules for customers.