HighChart - Getting 403 Access to the resource is prohibited

Start by reproducing the reported request with the provided curl command against https://export.highcharts.com/, comparing the 403 response when the Referer contains “fd” with a standard Referer. Trace the export request handling and identify the condition causing the block; done means the documented request succeeds without removing the standard User-Agent or Referer.

Expected behaviour

It should work as we have defined standard userAgent and Referer.

Actual behaviour

When we are using fd keyword in Referer, Our request is getting blocked and we are getting 403 error.

Live demo with steps to reproduce

Use Curl request to reproduce
curl --location 'https://export.highcharts.com/'
--header 'Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7'
--header 'Accept-Language: en-US,en;q=0.9'
--header 'Cache-Control: max-age=0'
--header 'Connection: keep-alive'
--header 'Cookie: _cfuvid=xoDKd4Zn9TVLByZhFuytr7SJLkLjZeo.Yp2x4Q-1730186434774-0.0.1.1-604800000; _cfuvid=jSiZD.soDNF3WSGFqMGJHo4GENaiPtxKcw7FkQTz7jA-1731391279507-0.0.1.1-604800000'
--header 'Origin: https://fd.abc.cloud'
--header 'Referer: https://fd.abc.cloud'
--header 'Sec-Fetch-Dest: document'
--header 'Sec-Fetch-Mode: navigate'
--header 'Sec-Fetch-Site: cross-site'
--header 'Sec-Fetch-User: ?1'
--header 'Upgrade-Insecure-Requests: 1'
--header 'User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36'
--header 'sec-ch-ua: "Chromium";v="130", "Google Chrome";v="130", "Not?A_Brand";v="99"'
--header 'sec-ch-ua-mobile: ?0'
--header 'sec-ch-ua-platform: "Windows"'
--form 'filename="Industrial"'
--form 'type="image/svg+xml"'
--form 'width="0"'
--form 'scale="2"'
--form 'svg="<svg xmlns:xlink="http://www.w3.org/1999/xlink\" version="1.1" class="highcharts-root" style="font-family:"Lucida Grande", "Lucida Sans Unicode", Arial, Helvetica, sans-serif;font-size:12px;" xmlns="http://www.w3.org/2000/svg\" width="600" height="400" viewBox="0 0 600 400">Created with Highcharts 9.3.3<clipPath id="highcharts-epvnv81-3712-"><rect x="0" y="0" width="515" height="221" fill="none"><clipPath id="highcharts-epvnv81-4450-"><rect x="0" y="0" width="515" height="221" fill="none"><clipPath id="highcharts-epvnv81-5925-"><rect x="75" y="74" width="515" height="221" fill="none"><rect fill="#ffffff" class="highcharts-background" x="0" y="0" width="600" height="400" rx="0" ry="0"><rect fill="none" class="highcharts-plot-background" x="75" y="74" width="515" height="221"><g class="highcharts-pane-group" data-z-index="0"><g class="highcharts-grid highcharts-xaxis-grid" data-z-index="1"><path fill="none" stroke-dasharray="none" data-z-index="1" class="highcharts-grid-line" d="M 112.5 74 L 112.5 295" opacity="1"><path fill="none" stroke-dasharray="none" data-z-index="1" class="highcharts-grid-line" d="M 226.5 74 L 226.5 295" opacity="1"><path fill="none" stroke-dasharray="none" data-z-index="1" class="highcharts-grid-line" d="M 340.5 74 L 340.5 295" opacity="1"><path fill="none" stroke-dasharray="none" data-z-index="1" class="highcharts-grid-line" d="M 454.5 74 L 454.5 295" opacity="1"><path fill="none" stroke-dasharray="none" data-z-index="1" class="highcharts-grid-line" d="M 568.5 74 L 568.5 295" opacity="1"><g class="highcharts-grid highcharts-yaxis-grid" data-z-index="1"><path fill="none" stroke="#e6e6e6" stroke-width="1" stroke-dasharray="none" data-z-index="1" class="highcharts-grid-line" d="M 75 295.5 L 590 295.5" opacity="1"><path fill="none" stroke="#e6e6e6" stroke-width="1" stroke-dasharray="none" data-z-index="1" class="highcharts-grid-line" d="M 75 240.5 L 590 240.5" opacity="1"><path fill="none" stroke="#e6e6e6" stroke-width="1" stroke-dasharray="none" data-z-index="1" class="highcharts-grid-line" d="M 75 185.5 L 590 185.5" opacity="1"><path fill="none" stroke="#e6e6e6" stroke-width="1" stroke-dasharray="none" data-z-index="1" class="highcharts-grid-line" d="M 75 129.5 L 590 129.5" opacity="1"><path fill="none" stroke="#e6e6e6" stroke-width="1" stroke-dasharray="none" data-z-index="1" class="highcharts-grid-line" d="M 75 73.5 L 590 73.5" opacity="1"><rect fill="none" class="highcharts-plot-border" data-z-index="1" x="75" y="74" width="515" height="221"><g class="highcharts-axis highcharts-xaxis" data-z-index="2"><path fill="none" class="highcharts-tick" stroke="#ccd6eb" stroke-width="1" d="M 112.5 295 L 112.5 305" opacity="1"><path fill="none" class="highcharts-tick" stroke="#ccd6eb" stroke-width="1" d="M 226.5 295 L 226.5 305" opacity="1"><path fill="none" class="highcharts-tick" stroke="#ccd6eb" stroke-width="1" d="M 340.5 295 L 340.5 305" opacity="1"><path fill="none" class="highcharts-tick" stroke="#ccd6eb" stroke-width="1" d="M 454.5 295 L 454.5 305" opacity="1"><path fill="none" class="highcharts-tick" stroke="#ccd6eb" stroke-width="1" d="M 568.5 295 L 568.5 305" opacity="1"><path fill="none" class="highcharts-axis-line" stroke="#ccd6eb" stroke-width="1" data-z-index="7" d="M 75 295.5 L 590 295.5"><g class="highcharts-axis highcharts-yaxis" data-z-index="2"><text x="26.488866806030273" data-z-index="7" text-anchor="middle" transform="translate(0,0) rotate(270 26.488866806030273 184.5)" class="highcharts-axis-title" style="color:#666666;fill:#666666;" y="184.5">hours<path fill="none" class="highcharts-axis-line" stroke="#ccd6eb" stroke-width="1" data-z-index="7" d="M 74.5 74 L 74.5 295"><g class="highcharts-series-group" data-z-index="3"><g class="highcharts-series highcharts-series-0 highcharts-spline-series" data-z-index="0.1" opacity="1" transform="translate(75,74) scale(1 1)" clip-path="url(#highcharts-epvnv81-4450-)"><path fill="none" d="M 5.0490196078431 58.45532875000001 C 504.10689309371 58.45420165000001 504.24280210065 58.453671249999985 504.51462011453 58.45256624999999 C 504.78643812841403 58.45146124999997 504.922347135356 58.45090875000001 505.19416514924 58.44980375 C 505.46598316312003 58.448698750000005 505.60189217006 58.448146249999986 505.87371018394 58.447041249999984 C 506.14552819782 58.44593624999998 506.28143720476 58.445389275 506.55325521864 58.444278749999995 C 506.8250732325199 58.443168224999994 506.96098223946 58.44264334999997 507.23280025334 58.44148862499998 C 507.50461826722403 58.44033389999996 507.640527274166 58.439654324999985 507.91234528805 58.43850512499998 C 508.18416330193 58.43735592499999 508.32007230886995 58.43684762499999 508.59189032275 58.43574262499999 C 508.86370833662994 58.434637624999986 508.99961734357004 58.43407959999997 509.27143535745 58.43298012499997 C 509.54325337133395 58.43188064999996 509.95098039216 58.430245249999984 509.95098039216 58.430245249999984" class="highcharts-graph" data-z-index="1" stroke="#00e272" stroke-width="2" stroke-linejoin="round" stroke-linecap="round"><g class="highcharts-markers highcharts-series-2 highcharts-spline-series" data-z-index="0.1" opacity="1" transform="translate(75,74) scale(1 1)" clip-path="none"><g class="highcharts-annotation" opacity="1" data-z-index="3" visibility="visible"><g class="highcharts-annotation-shapes" clip-path="url(#highcharts-epvnv81-5925-)"><g class="highcharts-annotation-labels" transform="translate(0,0)"><text x="10" text-anchor="start" class="highcharts-title" data-z-index="4" style="color:#333333;font-size:18px;fill:#333333;" y="24"><tspan style="font-weight:bold;font-size: 14px; float:left;">Industrial Refrigeration Advisor / APAC / Singapore / CapitaLand <tspan class="highcharts-br" dy="15" x="10">​<tspan style="font-weight:lighter;font-size: 12px">Present 28th Sep '''24 - 28th Oct '''24<tspan class="highcharts-br" dy="14" x="10">​<tspan style="font-weight:lighter;font-size: 11px">total run hours<text x="300" text-anchor="middle" class="highcharts-subtitle" data-z-index="4" style="color:#666666;fill:#666666;" y="73"><text x="10" text-anchor="start" class="highcharts-caption" data-z-index="4" style="color:#666666;fill:#666666;" y="397"><g class="highcharts-annotation" opacity="1" data-z-index="6" visibility="visible" style="cursor:ew-resize;"><g class="highcharts-annotation-shapes" clip-path="url(#highcharts-epvnv81-5925-)"><path fill="rgb(0, 0, 0)" fill-opacity=" 0.75" d="M 79.5 74 L 79.5 3074" stroke="rgb(0, 0, 0)" stroke-opacity=" 0.75" stroke-width="3"><path fill="rgb(192,192,192)" fill-opacity="0.0001" d="M 79.5 74 L 79.5 3074" class="highcharts-tracker-line" data-z-index="2" stroke-linejoin="round" stroke="rgb(192,192,192)" stroke-opacity="0.0001" stroke-width="7"><g class="highcharts-annotation-labels" transform="translate(0,0)"><g class="highcharts-label highcharts-annotation-label highcharts-no-tooltip" transform="translate(80,78)"><path fill="rgb(247,247,247)" fill-opacity="0.85" class="highcharts-label-box highcharts-annotation-label-box" d="M 3.5 0.5 L 109.5 0.5 C 112.5 0.5 112.5 0.5 112.5 3.5 L 112.5 21.5 C 112.5 24.5 112.5 24.5 109.5 24.5 L 3.5 24.5 C 0.5 24.5 0.5 24.5 0.5 21.5 L 0.5 3.5 C 0.5 0.5 0.5 0.5 3.5 0.5" stroke="rgb(204,204,204)" stroke-width="1"><text x="5" data-z-index="1" y="16" style="color:#000000;font-size:11px;font-weight:normal;fill:#000000;">28th Sep '''24 00:00<g class="highcharts-annotation" opacity="1" data-z-index="6" visibility="visible" style="cursor:ew-resize;"><g class="highcharts-annotation-shapes" clip-path="url(#highcharts-epvnv81-5925-)"><path fill="rgb(0, 0, 0)" fill-opacity=" 0.75" d="M 584.5 74 L 584.5 3074" stroke="rgb(0, 0, 0)" stroke-opacity=" 0.75" stroke-width="3"><path fill="rgb(192,192,192)" fill-opacity="0.0001" d="M 584.5 74 L 584.5 3074" class="highcharts-tracker-line" data-z-index="2" stroke-linejoin="round" stroke="rgb(192,192,192)" stroke-opacity="0.0001" stroke-width="7"><g class="highcharts-annotation-labels" transform="translate(0,0)"><g class="highcharts-label highcharts-annotation-label highcharts-no-tooltip" transform="translate(473,78)"><path fill="rgb(247,247,247)" fill-opacity="0.85" class="highcharts-label-box highcharts-annotation-label-box" d="M 3.5 0.5 L 109.5 0.5 C 112.5 0.5 112.5 0.5 112.5 3.5 L 112.5 12 L 111.5 16 L 112.5 12 L 112.5 21.5 C 112.5 24.5 112.5 24.5 109.5 24.5 L 3.5 24.5 C 0.5 24.5 0.5 24.5 0.5 21.5 L 0.5 3.5 C 0.5 0.5 0.5 0.5 3.5 0.5" stroke="rgb(204,204,204)" stroke-width="1"><text x="5" data-z-index="1" y="16" style="color:#000000;font-size:11px;font-weight:normal;fill:#000000;">28th Oct '''24 23:00<g class="highcharts-legend highcharts-no-tooltip" data-z-index="7" transform="translate(155,329)"><rect fill="none" class="highcharts-legend-box" rx="0" ry="0" x="0" y="0" width="290" height="56" visibility="visible"><g data-z-index="1"><g class="highcharts-legend-item highcharts-spline-series highcharts-color-undefined highcharts-series-0" data-z-index="1" transform="translate(8,3)"><path fill="none" d="M 0 11 L 16 11" class="highcharts-graph" stroke="#2caffe" stroke-width="2"><text x="21" style="color:#333333;cursor:pointer;font-size:12px;font-weight:bold;fill:#333333;" text-anchor="start" data-z-index="2" y="15"><tspan style="white-space: nowrap;" title="Compressor102 - Total Run Time Formula">Compressor102 - Total Run Time Formula<g class="highcharts-legend-item highcharts-spline-series highcharts-color-undefined highcharts-series-1" data-z-index="1" transform="translate(8,18)"><path fill="none" d="M 0 11 L 16 11" class="highcharts-graph" stroke="#544fc5" stroke-width="2"><text x="21" y="15" style="color:#333333;cursor:pointer;font-size:12px;font-weight:bold;fill:#333333;" text-anchor="start" data-z-index="2"><tspan style="white-space: nowrap;" title="Compressor 104 - Total Run Time Formula">Compressor 104 - Total Run Time Formula<g class="highcharts-legend-item highcharts-spline-series highcharts-color-undefined highcharts-series-2" data-z-index="1" transform="translate(8,33)"><path fill="none" d="M 0 11 L 16 11" class="highcharts-graph" stroke="#00e272" stroke-width="2"><text x="21" y="15" style="color:#333333;cursor:pointer;font-size:12px;font-weight:bold;fill:#333333;" text-anchor="start" data-z-index="2"><tspan style="white-space: nowrap;" title=" - Total Run Time Formula"> - Total Run Time Formula<g class="highcharts-axis-labels highcharts-xaxis-labels" data-z-index="7"><text x="112.66718127359" style="color:#666666;cursor:default;font-size:11px;fill:#666666;" text-anchor="middle" transform="translate(0,0)" y="314" opacity="1">30 Sep<text x="226.83074710369" style="color:#666666;cursor:default;font-size:11px;fill:#666666;" text-anchor="middle" transform="translate(0,0)" y="314" opacity="1">7 Oct<text x="340.99431293379" style="color:#666666;cursor:default;font-size:11px;fill:#666666;" text-anchor="middle" transform="translate(0,0)" y="314" opacity="1">14 Oct<text x="455.15787876389" style="color:#666666;cursor:default;font-size:11px;fill:#666666;" text-anchor="middle" transform="translate(0,0)" y="314" opacity="1">21 Oct<text x="569.32144459399" style="color:#666666;cursor:default;font-size:11px;fill:#666666;" text-anchor="middle" transform="translate(0,0)" y="314" opacity="1">28 Oct<g class="highcharts-axis-labels highcharts-yaxis-labels" data-z-index="7"><text x="60" style="color:#666666;cursor:default;font-size:11px;fill:#666666;" text-anchor="end" transform="translate(0,0)" y="299" opacity="1">0<text x="60" style="color:#666666;cursor:default;font-size:11px;fill:#666666;" text-anchor="end" transform="translate(0,0)" y="244" opacity="1">20k<text x="60" style="color:#666666;cursor:default;font-size:11px;fill:#666666;" text-anchor="end" transform="translate(0,0)" y="189" opacity="1">40k<text x="60" style="color:#666666;cursor:default;font-size:11px;fill:#666666;" text-anchor="end" transform="translate(0,0)" y="133" opacity="1">60k<text x="60" style="color:#666666;cursor:default;font-size:11px;fill:#666666;" text-anchor="end" transform="translate(0,0)" y="78" opacity="1">80k<g class="highcharts-control-points" data-z-index="99" clip-path="url(#highcharts-epvnv81-5925-)">"'

Product version

highchart 11.1.0

Affected browser(s)