[Bug]: 403 Forbidden error when uploading profile picture (CloudFront WAF Block)

[toanbui-tech]

What is the URL where the issue is happening

https://roadmap.sh/account/update-profile

What browsers are you seeing the problem on?

Chrome

Describe the Bug

I encountered a 403 Forbidden error while trying to update my profile picture on the /account/update-profile page. The request is being blocked by CloudFront.

Steps to Reproduce:

1. Go to https://roadmap.sh/account/update-profile.
2. Click on the profile picture upload section.
3. Select an image file to upload.
4. Observe the network request in DevTools.

Expected Behavior:

• The profile picture should be uploaded successfully, and the user profile should be updated.

Actual Behavior:

• The POST request to https://roadmap.sh/api/v1-upload-profile-picture fails with a 403 Forbidden status code. The response body indicates that the request was blocked by CloudFront.

Technical Details:

Request URL: https://roadmap.sh/api/v1-upload-profile-picture
Request Method: POST
Status Code: 403 Forbidden
Server: CloudFront
Response Content-Type: text/html
Request ID: 7mii4ywjChPY-i0RURaWKUhaxCcNa3v5D51ITsG7z4Lzmi165nPwgg== (as seen in the screenshot)

Screenshots:

Output from browser console (if any)

No response

Participation

• I am willing to submit a pull request for this issue.

[nilbuild]

This should be fixed now. Thank you for reporting!