-template-..-2f..-2f..-2f..-2froot-2f

The string you've provided is: -template-..-2F..-2F..-2F..-2Froot-2F

The attacker changes the URL to: https://example.com -template-..-2F..-2F..-2F..-2Froot-2F

Block requests containing sequences like: The string you've provided is: -template-