Jsdelivr: 403 Forbidden in China without Referrer

[Drew233]

I dont konw what happened.

[the1812]

Same question, all files from my repo are 403 now.

[hifocus]

It looks like jsDelivr's partner in China - Quantil, had misconfigured their CDNs. Any access without a referrer header will be returned with a 403 status code. This issue only exists in China - with Chinese IPs.

However I believe all websites that are using jsDelivr will not be affect by this incident; like mine: https://demo.qrcdn.com; since resources imported will have a referrer header.

@jimaek @MartinKolarik

Discussion on a Mandarin forum

[whosphp]

But any other scenes, no referrer provided. Just like tampermonkey script, it loads js, css, and other static files without referrer.

[MartinKolarik]

As @hifocus noted, the issue seems to be related to a missing referrer header and should not - does not, based on real-time analytics - affect most of regular users/websites. We'll of course try to get this fixed asap.

[jimaek]

A fix was finally deployed. We are really sorry about the impact this had on our Chinese users

[Drew233]

Thank you so much~

[hifocus]

thank you for maintaining the good service

[louisssliao]

awesome work