• danA
    link
    fedilink
    arrow-up
    2
    ·
    2 hours ago

    My guess would be that they are sanitizing them, but their WAF blocks requests with particular characters in these fields in order to try and block SQL injection or something.