I applied the patch SUPEE-6788 from and had a issue with a catalog/navigation block type.

I have this in a CMS static block:

{{block type="catalog/navigation" name="categoryLandingPage" template="catalog/category/landing.phtml"}}

And it no longer shows that block; no errors in the log, or var/report folder.

I have other static blocks with the block type of core/template and they are working fine. Right now, I think it has something to do with the APPSEC-1063 section of the patch.

2 Answers 2


The block likely uses a non-standard variable, which will need to be added to the whitelist. See this answer for steps on doing so.


You most likely will have to add a new block type to the 'safe' blocks that Magento understands. The most easy way to do this, is by navigating to:

System -> Permissions -> Blocks

in the Magento backend. You would then create a new block by clicking the button. Set the 'Block Name' to:


And allow it. This should do the trick.

Alternatively, you could lookup the tables permissions_blocks using your favorite MySQL viewer/editor, such as PHPMyAdmin, and insert a new entry with the above value.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.