403 - We detected that your latest request may have been part of suspicious activity and has been blocked. If you believe you are getting this message in error please let us know through our site's contact form.
Are you saying ?lang=* is not used in the links of the frontend link module and this is added by Admin Tools somehow?
I think the links do contain ?lang=*. Admin Tools is blocking this. I could ask them about the reasons why this is blocked, but I am pretty sure the have good reasons to block this.
Is adding ?lang=* to the links in the frontend link module necessary?
Better Frontend Link can add that. I am saying it is down to Admin Tools to deal with those.
There should be nothing wrong with urls that contain that.
This is what they tell me: "we're aware of this issue and it has already been fixed in the next version. For the moment you can disable the feature Suspicious Core Parameters inside the Configure WAF page."