Clicking below navigates to /rewrite/rewrite-button. The WAAP rewrites that path to /attacks.html before it reaches the origin — so a successful rewrite loads the Attacks page even though the address bar still shows /rewrite/rewrite-button.
/rewrite/rewrite-button
/attacks.html