By default, the exception page only displays the category or categories associated with the URL on the exception page if policy contains the following:
$(category) - ONE category
$(cs-categories) - All the categories the URL belongs to
For example, http://mashable.com/2009/07/11/funny-viral-videos/ is categorized as Humor/Jokes and Audio/Video Clips.
When a policy rule blocks audio/video clips and a user requests access to http://mashable.com/2009/07/11/funny-viral-videos/, the following occur:
To display the specific category being used in the policy, change the previius code in the exception page to the following:
$(x-exception-category)
For the previous example, if $(x-exception-category) is used in exception page, the category is Audio/Video Clips, which is the blacklisted category in policy.
Note: One exception is that if the default policy is DENY, "Default secure policy mode" may be observed when not matching a category.