[WAF] Clarify leaked credentials behavior

[pedrosousa]

Summary

Closes #20903.

[hyperlint-ai]

Howdy and thanks for contributing to our repo. The Cloudflare team reviews new, external PRs within two (2) weeks. If it's been two weeks or longer without any movement, please tag the PR Assignees in a comment.

We review internal PRs within 1 week. If it's something urgent or has been sitting without a comment, start a thread in the Developer Docs space internally.

---

PR Change Summary

Clarified the behavior of leaked credentials detection in the WAF documentation.

• Updated the explanation of how leaked credentials are detected and the implications for users.
• Added information about the handling of plaintext passwords during credential checks.
• Clarified the purpose of the Exposed-Credential-Check request header.

Modified Files

• src/content/docs/waf/detections/leaked-credentials/index.mdx

---

How can I customize these reviews?

Check out the Hyperlint AI Reviewer docs for more information on how to customize the review.

If you just want to ignore it on this PR, you can add the hyperlint-ignore label to the PR. Future changes won't trigger a Hyperlint review.

Note specifically for link checks, we only check the first 30 links in a file and we cache the results for several hours (for instance, if you just added a page, you might experience this). Our recommendation is to add hyperlint-ignore to the PR to ignore the link check for this PR.

What is Hyperlint?

Hyperlint is an AI agent that helps you write, edit, and maintain your documentation.

Learn more about the Hyperlint AI reviewer and the checks that we can run on your documentation.

[github-actions]

Preview URL: https://4b9e9a5f.preview.developers.cloudflare.com
Preview Branch URL: https://pedro-issue20903-waf-clarify-lcc.preview.developers.cloudflare.com

Files with changes (up to 15)

Original Link	Updated Link
https://developers.cloudflare.com/waf/detections/leaked-credentials/	https://pedro-issue20903-waf-clarify-lcc.preview.developers.cloudflare.com/waf/detections/leaked-credentials/