Hacker News Reader

Welcome to the world of WAFs. Pattern matching scary strings is big business.

For the uninitiated:

Believe me you can find them present in popular sites you use everyday ;-) I caught one of them and reported it.

Thanks. For me WAF is https://en.wikipedia.org/wiki/Wife_acceptance_factor since the 2000's era of German audio enthusiast forums

what dark magic is this? do you put it in front of all POSTs or something?

Not just POSTs, but any HTTP request - headers & query strings get inspected too.