@th3j35t3r
FYI, I just tried to post the above message with " " around the text and it kept getting a 403 error.
Understood.
Maybe a kinder error message would be a acceptable solution?
Definitely not on the critical list, but it would improve user experience.
Clarification, I added the * when I removed the "
I think it was the " that did it.
The original attempt had a " "
@jurban It's because of the combination of * and quotes. The WAF thought it was an injection attempt.