‘403 Forbidden’ when publishing a post containing different blocks
After carefully checking the hosting settings again, I found out that Plesk’s firewall was too restrictive. Each API call was going through it and — in most cases — any non-text block was mistakenly detected as WordPress Unauthenticated Content Injection vulnerability, for some reason. I noticed it in the firewall’s log. Whitelisting Gutenberg in the … Read more