How a Single ;/ Bypassed a Cloud WAF and Reached Protected Spring Boot Endpoints

Most WAF bypasses involve encoding tricks, obscure headers, or parser confusion.