Disables additional WAF Rule

This rule was blocking legit traffic. To be tagged v4.1.6

base/customer_portal/waf.tf

@@ -11,6 +11,7 @@ module "waf" {
   excluded_rules_AWSManagedRulesCommonRuleSet = [
     "SizeRestrictions_BODY",
     "GenericRFI_BODY",             # Blocks portal lambda MSOCI-2060
+    "CrossSiteScripting_BODY",     # Blocks portal API MSOCI-2121
   ]
 
   # These are passed through and should be the same for module