Ensure that WAF policy for Microsoft Azure Application gateway is set to Prevention mode.
Azure Web Application Firewall (WAF) on Azure Application Gateway provides centralized protection of your web applications from common exploits and vulnerabilities. Web applications are increasingly targeted by malicious attacks that exploit commonly known vulnerabilities.
Modify application gateway WAF policy and enable prevention mode.