403 Errors

A 403 error means the server refused permission for a request. This is usually caused by a misconfigured server or an overly aggressive firewall or security plugin.

Check Security Plugins

Security plugins may block legitimate Breakdance requests, especially:

• Editing PHP in a Code Block — Security plugins check for attempts to execute unauthorized PHP code.
• Uploading SVG files — Untrusted SVG files can contain malicious scripts.

If you use Wordfence, put it into Learning Mode. For other security plugins, follow their documentation on whitelisting requests and avoiding false positives.

Whitelist Breakdance Requests

All Breakdance AJAX requests include the URL parameter _breakdance_doing_ajax=yes.

Ask your host, CDN provider, or security-plugin provider to whitelist requests with this parameter. If you use Cloudflare, apply the exception there.