Cloudflare whacks WAF bypass bug that opened side door
go.theregister.com
: ACME validation had a challenge-request hole