Whenever a post contains "substring" I get a 403 error

Support
4

You might have a WAF enabled that blocks XSS attempts and substring is commonly used in the exploit syntax. If you’re using Cloudflare with WAF enabled that would be the cause.

1 Like