Ha. Well, your message did send me through the WAF route myself, and with the help of Mythos (Yeah, I know) I managed to craft what appears to be a solid set of rules for Nginx that we ended up not using.
Besides that, also with Mythos I managed to build PHP 5.6.40 for Jessie (Don't ask) but that's an entire different story (we ended up force upgrading to Bookworm, and there's a huge silver lining for us with that anyway)
Besides that, also with Mythos I managed to build PHP 5.6.40 for Jessie (Don't ask) but that's an entire different story (we ended up force upgrading to Bookworm, and there's a huge silver lining for us with that anyway)