Support

 Hi Nick,

We're having a problem with Admin Tools blocking the Save Search form in iProperty. For some reason, it only happens if certain options on the form are selected, which is making troubleshooting difficult. With some options selected this message appears:

"403 - This request is blocked by Admin Tools. Please change this message in the component's options."

I'm not sure if an exception needs to be added to the .htaccess file or if some other Admin Tools feature is causing this - any ideas? If an exception does need to be added, I'm not sure which file or folder is involved - I don't see any of the usual clues (like missing/broken images, 404 errors in Chrome's developer tools etc.)

Cheers,
Chris

A bit more info - I reviewed the security exception log and found that when the form is submitted, an "XSSShield" event is logged. Aside from turning off that feature (i.e. setting "Cross Site Scripting block (XSSShield)" to "No") is there another solution that would allow us to leave the feature enabled?

Chris

Chris,

You would not get that error message from the .htaccess file, so it is the Web Application Firewall that is triggering it.

You can set up a WAF Exception. The Security Exceptions Log will give you the information you need to fill in. The more information you enter in the exception, component, view, query, the more specific the exception is. For example, if you only fill in the component, the exception will turn off WAF for that entire competent.

That worked, thanks!

You are welcome!