Yeah.

And that they should probably, you know, in, do some form of interpretation on their string, uh, to make sure that the true intent of the string is being blocked.

Uh, because percent 50 is, uh, not that hard and, uh, to, to, to, to write into your browser.

And, uh, if that is the only thing stopping a person from exploiting a very critical all the way to RCE, uh, vulnerability, then, uh, I think you probably should take a few more seconds to implement, uh, a slightly better rule, uh, for, for your WAF.

Uh, but that's, uh, that's the, the core of what we're seeing here.

And it's very unfortunate.

I hope it was a little bit more complicated because I think this is, uh, we'll get to this a little bit later, but this was tied into their previous things of, of compromising the, uh, FBI's, you know, jobs.gov, whatever instance that-

That's a very good point.