This site will have limited functionality while we undergo maintenance to improve your experience. If an article doesn't solve your issue and you want to ask a question, we have our support community waiting to help you at @FirefoxSupport on Twitter and/r/firefox on Reddit.

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

Error 403: Forbidden. I have very specific instructions but can't find the answer here.

  • 4 replies
  • 19 have this problem
  • 3 views
  • Last reply by CiaoBella1

more options

"Forbidden (403)

CSRF verification failed. Request aborted.

You are seeing this message because this HTTPS site requires a 'Referer header' to be sent by your Web browser, but none was sent. This header is required for security reasons, to ensure that your browser is not being hijacked by third parties.

If you have configured your browser to disable 'Referer' headers, please re-enable them, at least for this site, or for HTTPS connections, or for 'same-origin' requests.

More information is available with DEBUG=True."


I just changed about config the other day - from 2 - 0, I think. Since I don't remember what I did, I will wait for your answer.

The error couldn't be clearer to someone who speaks the same language - am I right (or am I right)?

Thank you.

"Forbidden (403) CSRF verification failed. Request aborted. You are seeing this message because this HTTPS site requires a 'Referer header' to be sent by your Web browser, but none was sent. This header is required for security reasons, to ensure that your browser is not being hijacked by third parties. If you have configured your browser to disable 'Referer' headers, please re-enable them, at least for this site, or for HTTPS connections, or for 'same-origin' requests. More information is available with DEBUG=True." ---------------------------------------------------------------------- I just changed about config the other day - from 2 - 0, I think. Since I don't remember what I did, I will wait for your answer. The error couldn't be clearer to someone who speaks the same language - am I right (or am I right)? Thank you.

All Replies (4)

more options
more options

Cor-el,

What text do I enter to get the exact function back? I guess I have to return it to 2 (for links/images), but I do not remember what I entered. I'm not sure about the true/false setting, either.

I can follow instructions without understanding the technical reason for them and what they accomplish - which is what I do 90% of the time.

Thank you.

more options

You can reset those prefs via the right-click context menu to the default value if they appear user set (bold).

  • network.http.sendRefererHeader = 2 (Integer)
  • network.http.sendSecureXSiteReferrer = true (Boolean)
more options

You were so concise, I missed it the first time.

When I entered: network.http.sendRefererHeader, nothing showed up in the search. When I entered network.http.sendSecureXSiteReferrer, it was already set to "true."

I'm missing something. Thank you.