Workers receiving absolute hostnames

Every so often, my service receives a request with the URL

(That trailing . on the hostname indicates an absolute hostname.)

This is perfectly valid DNS, but it seems odd that Cloudflare leaves it intact at the worker layer. I’m forced to strip it off in order to do logic based on the hostname.

Even more odd: Cloudflare’s firewall doesn’t see the absolute hostname. I made a Firewall rule that blocks when ( matches "\\.$"), but it hasn’t ever fired even though my workers continue to get traffic with the trailing dot.

Has anyone else seen this?