Support

Hi. I have an issue I can't resolve.

I have an Joomla! article displaying a Fabrik list (Fabrik is a component - https://fabrikar.com/). When I filter the list, I get a 403 error with the reason "tmpl in URL".
However, there is no "tmpl=" in the query or the URL which is like this:

https://www.XXX.fr/tableau-de-bord?clearfilters=0&clearordering=0&resetfilters=0

Without the URL rewriting, the URL is 

https://www.XXX.fr/index.php?option=com_content&view=article&id=2&Itemid=130&resetfilters=0&clearordering=0&clearfilters=0

Note that I don't have this issue if I access the list directly (via a menu item to the Fabrik component), only when the list is embedded in an article (via a content plugin).

I added com_content, article and the different query parameters in the WAF exception, as well as com_fabrik, list and the same parameters, but that does not solve the issue.

I also added "resetfilters,clearordering,clearfilters" to the list of allowed tmpl, but with no more luck.

The only thing that works is to turn off "Block tmpl=foo system template switch", but I would prefer to have a safer solution. Do you think it's possible?

Kind regards and Happy New Year.

Thanks, your comments were valuable hints.

There is an Ajax request, still with no "tmpl=" mention in it, but it calls to something where there is a reference to the internal Fabrik templating, so you need to add the name of the template used in the list of allowed tmpl and now ti's working, with the protection ON.