What my WAF actually blocked, and what my app already stops on its own

A request arrives at your server for /api/vehicles/1' OR '1'='1. Before a single line of your...