Problem type · HTTP 403

Cross-origin cookie mutation refused

A cookie-adopting request arrived from another origin. Send it same-origin with the CSRF header.

Type URI

https://obeliskgate.com/problems/cross-origin-cookie-mutation — sent as type; reason carries the slug cross-origin-cookie-mutation.

Every type

The full registry is at /problems.

Give your users a login that keeps receipts.

Passkey sign-in, OAuth for agents, and a record anyone can check.

Create your account →Verify it yourself →

Already have an account? Sign in.