{"id":15988899,"date":"2022-09-07T20:27:41","date_gmt":"2022-09-07T20:27:41","guid":{"rendered":"https:\/\/wordpress.org\/support\/?post_type=topic&p=15988899"},"modified":"2022-09-07T20:33:51","modified_gmt":"2022-09-07T20:33:51","slug":"403-errors-mod_security","status":"publish","type":"topic","link":"https:\/\/wordpress.org\/support\/topic\/403-errors-mod_security\/","title":{"rendered":"403 Errors, mod_security"},"content":{"rendered":"

Hi there!<\/p>\n

I’ve started getting 403 errors on my sites today, and I’ve narrowed it down to an issue with Jetpack.<\/p>\n

Also, the errors only appear when I am logged in – the sites work fine for unauthenticated users.<\/p>\n

Here’s what I found in my server error logs:<\/p>\n

[Wed Sep 07 20:14:47.073682 2022] [:error] [pid 25529:tid 139752690919168] [client ********] [client ********] ModSecurity: Access denied with code 403 (phase 4). Match of "rx \\\\\\\\ssrc=\\\\\\\\x22https:\\\\\\\\\/\\\\\\\\\/www\\\\\\\\.googletagmanager\\\\\\\\.com\\\\\\\\\/ns\\\\\\\\.html\\\\\\\\?id=GTM|\\\\\\\\ssrc=\\\\\\\\x22https:\\\\\\\\\/\\\\\\\\\/w\\\\\\\\.soundcloud\\\\\\\\.com\\\\\\\\\/player\\\\\\\\\/\\\\\\\\?url=" against "TX:0" required. [file "\/etc\/apache2\/modsecurity.d\/rules\/comodo_free\/19_Outgoing_FilterInFrame.conf"] [line "14"] [id "214540"] [rev "5"] [msg "COMODO WAF: Possibly malicious iframe tag in output||fullofwords.com|F|3"] [data "Matched Data: <iframe src=\\\\x22https:\/\/widgets.wp.com\/3rd-party-cookie-check\/index.html\\\\x22 style=\\\\x22display:none found within TX:0: <iframe src=\\\\x22https:\/\/widgets.wp.com\/3rd-party-cookie-check\/index.html\\\\x22 style=\\\\x22display:none"] [severity "ERROR"] [tag "CWAF"] [tag "FilterInFrame"] [hostname "fullofwords.com"] [uri "\/index.php"] [unique_id "Yxj7tlI-CVeSPfrqHhMjkQAAAMc"], referer: https:\/\/fullofwords.com\/wp-admin\/<\/code>`<\/p>\n

Let me know if you need anything else to troubleshoot this issue!<\/p>\n","protected":false},"template":"","class_list":["post-15988899","topic","type-topic","status-publish","hentry"],"jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic\/15988899","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic"}],"about":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/types\/topic"}],"version-history":[{"count":1,"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic\/15988899\/revisions"}],"predecessor-version":[{"id":15988917,"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic\/15988899\/revisions\/15988917"}],"wp:attachment":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/media?parent=15988899"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}