It looks like "WAF - add exceptions" supports Wireshark style expressions, so there's things like: (http.request.uri.query contains "some-string") Or similar

It looks like "WAF - add exceptions" supports Wireshark style expressions, so there's things like: (http.request.uri.query contains "some-string") Or similar for checking headers, post body content, etc.