Skip to content

HTTP 403

origin_rejected

What to do: Add the site origin to the Form allowed origins.

settings.allowed_origins restricts which sites may post and doubles as the CORS allowlist. The submission is stored as quarantined with reason origin_rejected.

Shape

{ "error": { "code": "origin_rejected", "message": "…", "hint": "Add the site origin to the Form allowed origins.", "docs": "https://postbag.dev/docs/errors/origin_rejected/" } }

All codes are listed on the error reference. Conventions for the envelope, hints and next[] are in the API overview.