• Skip to main content
  • Skip to search
  • Skip to select language
MDN Web Docs
  • References
    • Overview / Web Technology

      Web technology reference for developers

    • HTML

      Structure of content on the web

    • CSS

      Code used to describe document style

    • JavaScript

      General-purpose scripting language

    • HTTP

      Protocol for transmitting web resources

    • Web APIs

      Interfaces for building web applications

    • Web Extensions

      Developing extensions for web browsers

    • Web Technology

      Web technology reference for developers

  • Guides
    • Overview / MDN Learning Area

      Learn web development

    • MDN Learning Area

      Learn web development

    • HTML

      Learn to structure web content with HTML

    • CSS

      Learn to style content using CSS

    • JavaScript

      Learn to run scripts in the browser

    • Accessibility

      Learn to make the web accessible to all

  • Plus
    • Overview

      A customized MDN experience

    • AI Help

      Get real-time assistance and support

    • Updates

      All browser compatibility updates at a glance

    • Documentation

      Learn how to use MDN Plus

    • FAQ

      Frequently asked questions about MDN Plus

  • Curriculum New
  • Blog
    • Playground

      Write, test and share your code

    • HTTP Observatory

      Scan a website for free

    • AI Help

      Get real-time assistance and support

  • Log in
  • Sign up for free
  1. 給開發者的網頁技術文件
  2. HTTP
  3. HTTP 回應狀態碼
  4. 403 Forbidden
    • English (US)
    • Deutsch
    • Español
    • Français
    • 日本語
    • 한국어
    • Português (do Brasil)
    • Русский
    • 中文 (简体)

此頁面由社群從英文翻譯而來。了解更多並加入 MDN Web Docs 社群。

在本文中

  • 狀態
  • 範例
  • 規範
  • 瀏覽器相容性
  • 參見
  1. HTTP
  2. Guides
  3. An overview of HTTP
  4. 典型的 HTTP 會話
  5. HTTP Messages
  6. MIME types (IANA media types)
  7. Compression in HTTP
  8. HTTP caching
  9. HTTP authentication
  10. 使用 HTTP Cookie
  11. Redirections in HTTP
  12. HTTP conditional requests
  13. HTTP range requests
  14. Content negotiation
  15. /Connection_management_in_HTTP_1
  16. Evolution of HTTP
  17. 協議升級機制
  18. Proxy servers and tunneling
  19. HTTP Client hints
  20. HTTP security
    1. Practical security implementation guides
    2. HTTP Observatory
    3. Permissions Policy 實驗性質
    4. Content Security Policy (CSP)
    5. 跨來源資源共享（CORS）
    6. /Cross
    7. Headers
  21. References
  22. HTTP headers
    1. Accept
    2. Accept-CH
    3. Accept-Charset
    4. Accept-Encoding
    5. Accept-Language
    6. Accept-Patch
    7. Accept-Post
    8. Accept-Ranges
    9. Access-Control-Allow-Credentials
    10. Access-Control-Allow-Headers
    11. Access-Control-Allow-Methods
    12. Access-Control-Allow-Origin
    13. Access-Control-Expose-Headers
    14. Access-Control-Max-Age
    15. Access-Control-Request-Headers
    16. Access-Control-Request-Method
    17. Age
    18. Allow
    19. Alt-Svc
    20. Alt-Used
    21. Attribution-Reporting-Eligible 實驗性質
    22. Attribution-Reporting-Register-Source 實驗性質
    23. Attribution-Reporting-Register-Trigger 實驗性質
    24. Authorization
    25. Cache-Control
    26. Clear-Site-Data
    27. Connection
    28. Content-Digest
    29. Content-Disposition
    30. Content-DPR Non-standard 已棄用
    31. Content-Encoding
    32. Content-Language
    33. Content-Length
    34. Content-Location
    35. Content-Range
    36. Content-Security-Policy
    37. Content-Security-Policy-Report-Only
    38. Content-Type
    39. Cookie
    40. Critical-CH 實驗性質
    41. Cross-Origin-Embedder-Policy
    42. Cross-Origin-Opener-Policy
    43. Cross-Origin-Resource-Policy
    44. Date
    45. Device-Memory
    46. Digest Non-standard 已棄用
    47. DNT Non-standard 已棄用
    48. Downlink 實驗性質
    49. DPR Non-standard 已棄用
    50. Early-Data 實驗性質
    51. ECT 實驗性質
    52. ETag
    53. Expect
    54. Expect-CT 已棄用
    55. Expires
    56. Forwarded
    57. From
    58. Host
    59. If-Match
    60. If-Modified-Since
    61. If-None-Match
    62. If-Range
    63. If-Unmodified-Since
    64. Keep-Alive
    65. Last-Modified
    66. Link
    67. Location
    68. Max-Forwards
    69. NEL 實驗性質
    70. No-Vary-Search 實驗性質
    71. Observe-Browsing-Topics 實驗性質 Non-standard
    72. Origin
    73. Origin-Agent-Cluster 實驗性質
    74. Permissions-Policy 實驗性質
    75. Pragma 已棄用
    76. Priority
    77. Proxy-Authenticate
    78. Proxy-Authorization
    79. Range
    80. Referer
    81. Referrer-Policy
    82. Refresh
    83. Report-To Non-standard 已棄用
    84. Reporting-Endpoints 實驗性質
    85. Repr-Digest
    86. Retry-After
    87. RTT 實驗性質
    88. Save-Data 實驗性質
    89. Sec-Browsing-Topics 實驗性質 Non-standard
    90. Sec-CH-Prefers-Color-Scheme 實驗性質
    91. Sec-CH-Prefers-Reduced-Motion 實驗性質
    92. Sec-CH-Prefers-Reduced-Transparency 實驗性質
    93. Sec-CH-UA 實驗性質
    94. Sec-CH-UA-Arch 實驗性質
    95. Sec-CH-UA-Bitness 實驗性質
    96. Sec-CH-UA-Full-Version 已棄用
    97. Sec-CH-UA-Full-Version-List 實驗性質
    98. Sec-CH-UA-Mobile 實驗性質
    99. Sec-CH-UA-Model 實驗性質
    100. Sec-CH-UA-Platform 實驗性質
    101. Sec-CH-UA-Platform-Version 實驗性質
    102. Sec-Fetch-Dest
    103. Sec-Fetch-Mode
    104. Sec-Fetch-Site
    105. Sec-Fetch-User
    106. Sec-GPC 實驗性質 Non-standard
    107. Sec-Purpose
    108. Sec-WebSocket-Accept
    109. Sec-WebSocket-Extensions
    110. Sec-WebSocket-Key
    111. Sec-WebSocket-Protocol
    112. Sec-WebSocket-Version
    113. Server
    114. Server-Timing
    115. Service-Worker-Navigation-Preload
    116. Set-Cookie
    117. Set-Login 實驗性質
    118. SourceMap
    119. Speculation-Rules 實驗性質
    120. Strict-Transport-Security
    121. Supports-Loading-Mode 實驗性質
    122. TE
    123. Timing-Allow-Origin
    124. Tk Non-standard 已棄用
    125. Trailer
    126. Transfer-Encoding
    127. Upgrade
    128. Upgrade-Insecure-Requests
    129. User-Agent
    130. Vary
    131. Via
    132. Viewport-Width Non-standard 已棄用
    133. Want-Content-Digest
    134. Want-Digest Non-standard 已棄用
    135. Want-Repr-Digest
    136. Warning 已棄用
    137. Width Non-standard 已棄用
    138. WWW-Authenticate
    139. X-Content-Type-Options
    140. X-DNS-Prefetch-Control Non-standard
    141. X-Forwarded-For Non-standard
    142. X-Forwarded-Host Non-standard
    143. X-Forwarded-Proto Non-standard
    144. X-Frame-Options 回應標頭 已棄用
    145. X-XSS-Protection Non-standard
  23. HTTP request methods
    1. CONNECT
    2. DELETE
    3. GET
    4. HEAD
    5. OPTIONS
    6. PATCH
    7. POST
    8. PUT
    9. TRACE
  24. HTTP response status codes
    1. 100 Continue
    2. 101 Switching Protocols
    3. 102 Processing
    4. 103 Early Hints
    5. 200 OK
    6. 201 Created
    7. 202 Accepted
    8. 203 Non-Authoritative Information
    9. 204 No Content
    10. 205 Reset Content
    11. 206 Partial Content
    12. 207 Multi-Status
    13. 208 Already Reported
    14. 226 IM Used
    15. 300 Multiple Choices
    16. 301 Moved Permanently
    17. 302 Found
    18. 303 See Other
    19. 304 Not Modified
    20. 307 Temporary Redirect
    21. 308 Permanent Redirect
    22. 400 Bad Request
    23. 401 Unauthorized
    24. 402 Payment Required
    25. 403 Forbidden
    26. 404 Not Found
    27. 405 Method Not Allowed
    28. 406 Not Acceptable
    29. 407 Proxy Authentication Required
    30. 408 Request Timeout
    31. 409 Conflict
    32. 410 Gone
    33. 411 Length Required
    34. 412 Precondition Failed
    35. 413 Content Too Large
    36. 414 URI Too Long
    37. 415 Unsupported Media Type
    38. 416 Range Not Satisfiable
    39. 417 Expectation Failed
    40. 418 I'm a teapot
    41. 421 Misdirected Request
    42. 422 Unprocessable Content
    43. 423 Locked
    44. 424 Failed Dependency
    45. 425 Too Early
    46. 426 Upgrade Required
    47. 428 Precondition Required
    48. 429 Too Many Requests
    49. 431 Request Header Fields Too Large
    50. 451 Unavailable For Legal Reasons
    51. 500 Internal Server Error
    52. 501 Not Implemented
    53. 502 Bad Gateway
    54. 503 Service Unavailable
    55. 504 Gateway Timeout
    56. 505 HTTP Version Not Supported
    57. 506 Variant Also Negotiates
    58. 507 Insufficient Storage
    59. 508 Loop Detected
    60. 510 Not Extended
    61. 511 Network Authentication Required
  25. CSP directives
    1. CSP: base-uri
    2. CSP: block-all-mixed-content 已棄用
    3. CSP: child-src
    4. CSP: connect-src
    5. CSP: default-src
    6. CSP: fenced-frame-src 實驗性質
    7. CSP: font-src
    8. CSP: form-action
    9. CSP: frame-ancestors
    10. CSP: frame-src
    11. CSP: img-src
    12. CSP: manifest-src
    13. CSP: media-src
    14. CSP: object-src
    15. CSP: prefetch-src Non-standard 已棄用
    16. CSP: report-to
    17. CSP: report-uri 已棄用
    18. CSP: require-trusted-types-for 實驗性質
    19. CSP: sandbox
    20. CSP: script-src
    21. CSP: script-src-attr
    22. CSP: script-src-elem
    23. CSP: style-src
    24. CSP: style-src-attr
    25. CSP: style-src-elem
    26. CSP: trusted-types 實驗性質
    27. CSP: upgrade-insecure-requests
    28. CSP: worker-src
  26. CORS errors
    1. Reason: CORS disabled
    2. Reason: CORS header 'Access-Control-Allow-Origin' does not match 'xyz'
    3. Reason: CORS header 'Access-Control-Allow-Origin' missing
    4. Reason: CORS header 'Origin' cannot be added
    5. Reason: CORS preflight channel did not succeed
    6. Reason: CORS request did not succeed
    7. Reason: CORS request external redirect not allowed
    8. Reason: CORS request not HTTP
    9. Reason: Credential is not supported if the CORS header 'Access-Control-Allow-Origin' is '*'
    10. Reason: Did not find method in CORS header 'Access-Control-Allow-Methods'
    11. Reason: expected 'true' in CORS header 'Access-Control-Allow-Credentials'
    12. Reason: invalid token 'xyz' in CORS header 'Access-Control-Allow-Headers'
    13. Reason: invalid token 'xyz' in CORS header 'Access-Control-Allow-Methods'
    14. Reason: missing token 'xyz' in CORS header 'Access-Control-Allow-Headers' from CORS preflight channel
    15. Reason: Multiple CORS header 'Access-Control-Allow-Origin' not allowed
  27. Permissions-Policy directives
    1. Permissions-Policy: accelerometer 實驗性質
    2. Permissions-Policy: ambient-light-sensor 實驗性質
    3. Permissions-Policy: attribution-reporting 實驗性質
    4. Permissions-Policy: autoplay 實驗性質
    5. Permissions-Policy: bluetooth 實驗性質
    6. Permissions-Policy: browsing-topics 實驗性質 Non-standard
    7. Permissions-Policy: camera 實驗性質
    8. Permissions-Policy: compute-pressure 實驗性質
    9. Permissions-Policy: display-capture 實驗性質
    10. Permissions-Policy: document-domain 實驗性質
    11. Permissions-Policy: encrypted-media 實驗性質
    12. Permissions-Policy: fullscreen 實驗性質
    13. Permissions-Policy: gamepad 實驗性質
    14. Permissions-Policy: geolocation 實驗性質
    15. Permissions-Policy: gyroscope 實驗性質
    16. Permissions-Policy: hid 實驗性質
    17. Permissions-Policy: identity-credentials-get 實驗性質
    18. Permissions-Policy: idle-detection 實驗性質
    19. Permissions-Policy: local-fonts 實驗性質
    20. Permissions-Policy: magnetometer 實驗性質
    21. Permissions-Policy: microphone 實驗性質
    22. Permissions-Policy: midi 實驗性質
    23. Permissions-Policy: otp-credentials 實驗性質
    24. Permissions-Policy: payment 實驗性質
    25. Permissions-Policy: picture-in-picture 實驗性質
    26. Permissions-Policy: publickey-credentials-create 實驗性質
    27. Permissions-Policy: publickey-credentials-get 實驗性質
    28. Permissions-Policy: screen-wake-lock 實驗性質
    29. Permissions-Policy: serial 實驗性質
    30. Permissions-Policy: speaker-selection 實驗性質
    31. Permissions-Policy: storage-access 實驗性質
    32. Permissions-Policy: usb 實驗性質
    33. Permissions-Policy: web-share 實驗性質
    34. Permissions-Policy: window-management 實驗性質
    35. Permissions-Policy: xr-spatial-tracking 實驗性質
  28. HTTP resources and specifications

在本文中

  • 狀態
  • 範例
  • 規範
  • 瀏覽器相容性
  • 參見

403 Forbidden

HTTP 403 Forbidden 回應狀態碼表示伺服器理解了請求，但拒絕授權。

這個狀態類似於 401，但對於 403 Forbidden 狀態碼，重新驗證不能提供幫助。存取權限與應用程式邏輯相關，例如資源的訪問權限不足。

狀態

http
403 Forbidden

範例

http
HTTP/1.1 403 Forbidden
Date: Wed, 21 Oct 2015 07:28:00 GMT

規範

Specification
HTTP Semantics
# status.403

瀏覽器相容性

參見

  • 401
  • HTTP 狀態碼定義

Help improve MDN

Learn how to contribute.

This page was last modified on 2024年4月13日 by MDN contributors.

View this page on GitHub • Report a problem with this content
MDN logo

Your blueprint for a better internet.

  • MDN on Mastodon
  • MDN on X (formerly Twitter)
  • MDN on GitHub
  • MDN Blog RSS Feed

MDN

  • About
  • Blog
  • Careers
  • Advertise with us

Support

  • Product help
  • Report an issue

Our communities

  • MDN Community
  • MDN Forum
  • MDN Chat

Developers

  • Web Technologies
  • Learn Web Development
  • MDN Plus
  • Hacks Blog
Mozilla logo
  • Website Privacy Notice
  • Cookies
  • Legal
  • Community Participation Guidelines

Visit Mozilla Corporation’s not-for-profit parent, the Mozilla Foundation.
Portions of this content are ©1998–2024 by individual mozilla.org contributors. Content available under a Creative Commons license.