CNAME redirect bypasses Zone lockdown and WAF?

Hi!

I have a site that i keep under a zone lockdown, as it's still under development.

However i can bypass the zone lockdown, as well as any WAF rules configured on my site, by adding a CNAME record at a different domain's apex, that has my site as the target.
Was this page helpful?