Cloudflare: Remote file inclusion using "/cdn-cgi/pe/bag2?r[]="

Remote file inclusion using "/cdn-cgi/pe/bag2?r[]" in Cloudflare, permitting arbitrary resource loading into HTML response form. Delayed HTTP request headers observed: X-Forwarded-For, Client-IP, Referer, Contact, X-Wap-Profile, Forwarded, X-Originated-IP, X-Client-IP, From, User Agent. Screenshots depict OOB request, response, IP address, and collaborator interaction. Incident reported on May 2nd, verified and triaged on May 10th, patched for rollout on Jul 6th, verified on Jul 6th, and resolved on Aug 15th