As with per-site WAF policies, more specific policies override less specific ones. This means a per-URI policy on a URL path map overrides any per-site or global WAF policy above it. https://docs.microsoft.com/en-us/azure/web-application-firewall/ag/policy-overview
www.000webhost.com