Potential bypass of domain name filter by crafting a DNS request with multiple questions, with the first question being legitimate.

Depends on a local attackers ability to craft multiple questions and the remote DoH server supporting them.