I read this page: Category:OWASP Best Practices: Use of Web Application Firewalls, and I found that WAF cannot generally detect logical attacks.
We know each web application has a number of input parameters. I think these input parameters and their associated valid values can be possibly extracted by code analysis tool.
Now, my question is that can we use code analysis tools and pass their results to the WAF to detect some logical attacks such as an example which has been described in this page: Logical and Technical Vulnerabilities?
Besides, I would like to know what are the advantages of using code analysis with WAF?
I googled and I couldn't find any WAF which uses code analysis for generating its rules or increasing its performance and decreasing false positives.