Under WAF Exceptions I have Component = com_k2, in View: template= in URL, and in Query: tmpl=component&template=system.
Yet he gets blocked for Template in URL = https://www.tastewashingtontravel.com/eat/home-cooking/item/add?tmpl=component&template=system
If I remove the View and Query from WAF Exceptions he still gets blocked. Not quite sure why the com_k2 doesn't stop the blocking.