If enabled (via ECOMMERCE_TEST_WEB_SECURITY), the e2e tests will
confirm that the E-Commerce web server will stop some common
attacks (the kind of thing that a WAF looks for).