Configuration oversights can still be leveraged in attacks - despite costly WAFs protecting the infrastructure.

Google's updated documentation asks publishers to change how they use JavaScript to block users from paywalled content.