WAF protection against common web attacks