A security team needs to prevent a remote code execution vulnerability.

When Web Application Firewalls (WAFs) are configured to block specific patterns (like${), attackers may bypass this using URL encoding (e.g.,%24%7B). In such cases, the WAF must decode these patterns before applying matching rules. EnablingURL decodingensures the WAF recognizes encoded payloads and applies protections appropriately. This is a recommended hardening strategy against bypass techniques for command injection and remote code execution.