As announced two weeks ago on Monday, January 14th (status message #230), we have enabled the new web application firewall in blocking mode.
For details, please take a look at the documentation, or contact us if you have any questions.
Reference: #291