You are a security engineer tasked with protecting the application from injection-based attacks.

Automated scanners are targeting the login form with SQL injection payloads, attempting to extract credentials or bypass authentication by manipulating backend database queries.

Enable WAF inspection to detect and block malicious SQL injection requests before they reach the application layer.

Attach a WAF policy to the virtual server and enable SQL injection attack signatures for the /login endpoint.