Impossible to publish with Gutenberg (solved by deactivating the OVH web hosting plan firewall)

[Koztoujours]

When I write a post with Gutenberg, first it shows "update failed" (free translation from French), then when I try to publish, it shows "publication failed".

Moreover, there is no automatic backup. I have drafts called "auto draft" ("brouillon auto" in French) but they are empty of any content.

I can only publish when I deactivate Gutenberg.

Experienced with Edge and Firefox. Blog is Koztoujours.fr Host is OVH

For info:

• I'm not a Wordpress newbie. I use Wordpress with pleasure since 2005
• The post shwon as published hereunder with "Gutenberger" specified could only be published after deactivating Gutenberg.

[pento]

Thank you for the bug report, @Koztoujours!

Could you provide a list of any other plugins you have installed on this site?

Also, I noticed you use Cloudflare on your site: if you login to your Cloudflare account, do you see any errors in your Firewall log that show up when you use Gutenberg?

[Koztoujours]

Hello,

Here is my list of plugins. However, I tried to deactivate all, except Gutenberg, and was still unable to publish.

Akismet Anti-Spam

Clean My Archives

Comments Widget Plus

Count Post Signs

Dynamic To Top

Gutenberg

iThemes Security

Jetpack par WordPress.com

JM Twitter Cards

Shareaholic | share buttons, analytics, related posts

Simple Author Highlighter

Simple Comment Editing

WP Super Cache

WP-Footnotes

WP-UserOnline

Yoast SEO

I am not very familiar with Cloudflare, which was installed by a friend. I went to "Firewall" on the dashboard but I am not sure what to look. Is it "Firewall events" ? I don't see any specific errors, just events like "challenge".

Le lun. 13 août 2018 à 04:50, Gary Pendergast notifications@github.com a écrit :

Thank you for the bug report, @Koztoujours https://github.com/Koztoujours!

Could you provide a list of any other plugins you have installed on this site?

Also, I noticed you use Cloudflare on your site: if you login to your Cloudflare account, do you see any errors in your Firewall log that show up when you use Gutenberg?

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub https://github.com/WordPress/gutenberg/issues/8895#issuecomment-412395621, or mute the thread https://github.com/notifications/unsubscribe-auth/AoWhOc6N59u58Or-r9btexiRqN1NoarFks5uQOlZgaJpZM4V5b5B .

-- https://about.me/lemorhedec?promo=email_sig&utm_source=product&utm_medium=email_sig&utm_campaign=gmail_api&utm_content=thumb Erwan Le Morhedec about.me/lemorhedec https://about.me/lemorhedec?promo=email_sig&utm_source=product&utm_medium=email_sig&utm_campaign=gmail_api&utm_content=thumb

[Koztoujours]

I also tried with Twenty Fifteen, to see if the bug comes from my theme. It doesn't seem so.

[pento]

Thank you for the extra information, @Koztoujours.

The problem is probably being caused by iThemes security: you can see it blocking some REST API access here:

http://koztoujours.fr/wp-json/wp/v2/categories

Could you change the iThemes Security REST API settings to "Default Access", and try again? You can see how to change this setting here:

https://ithemes.com/security/wordpress-rest-api-restrict-access/

[Koztoujours]

Unfortunately... As you can see, I did the change but still cannot publish (see the red alert "update failed" which comes to "publication failed" afterwards).

ISecurity :

Fail :

[ValentinBrclz]

Can you check that you deactivated the OVH firewall as well?

For Cloudflare, you should try to do as suggested here, at least temporarily : https://github.com/WordPress/gutenberg/issues/2565#issuecomment-334346927

[ValentinBrclz]

Ah @Koztoujours ! For me it only worked when I deactivated the firewall on the whole hosting plan (not only in the multisite). This can be done from the "Informations générales" page, through "Modifier la configuration" next to your version of PHP.

[Koztoujours]

Hello, thank you for your advice.

I did both, following your advice, but it still doesn't work...

OVH:

Cloudflare:

By the way, I'm a little bit concerned to have to deactivate security on cloudflare and OVH (not to mention iSecurity) just to be able to publish.

[Koztoujours]

I understand that the participants so far have no new ideas to propose and I want to thank them for what they did until now. However, if anyone else has a clue, it would be quite useful to allow me to keep on blogging, like I did with Wordpress for 13 years...

[ValentinBrclz]

Like I said, you need to remove the firewall from "Informations générales" and use the button "Modifier la configuration" (its the main tab when you go on an hosting plan).

I checked my error logs and I had this that was found:

"/usr/local/apache2/conf/modsecurity/base_rules/modsecurity_crs_30_http_policy.conf"] [line "63"] [id "960010"] [msg "Request content type is not allowed by policy"] [data "application/json"] [severity "WARNING"] [tag "POLICY/ENCODING_NOT_ALLOWED"] [tag "WASCTC/WASC-20"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/EE2"] [tag "PCI/12.1"] [hostname "dummy-domain.ch"] [uri "/wp-json/wp/v2/pages/7/autosaves"] [unique_id "W3NShwoAPxwAACSvzqIAAABg"]

[Koztoujours]

Ok.

First time, I went directly to the "multisite" tab.

This time, I went to "Informations Générales" and "modifier la configuration" then deactivate the "pare-feu applicatif".

I also checked that:

• I have the page rule in cloudflare
• I changed the iThemes Security REST API settings to "Default Access".

This done, it's ok. Thank you very much for your help.

[zachatkinson]

I am having this same issue, reinstalled my site 3 times and only plugin installed is Guttenberg itself - using TwentySeventeen and having problems. Strangely it's only on one of my sites as my others even on the same server don't have these problems.

[ValentinBrclz]

@zachatkinson : Please create another issue as this seems not to be related to this one... unless you are using ovh. Also, it doesn't help if you do not provide details (errors, hoster, cloudflare or not).

@koztoujours : it would be ideal to be able to pass through the ovh waf if possible, I hope this can be fixed by making requests look more legit...

[FrenchW]

Dear @Koztoujours , @zachatkinson

I'm also on WP with OVH and have the same issue. Firewall was also disabled on the multisite configuration but, I found it activated on the host php configuration, not visible anywhere else. I disabled it and all works fine now (and faster) Fred

[designsimply]

@ValentinBrclz thank you for the direction in this issue!

@FrenchW thank you for the extra notes and screenshots!

@zachatkinson were you able to get that one site working that was giving you trouble? If not, please open a new issue and include any errors you see in your web developer tools console panel at the same time you see the "updating failed" error. That should hopefully give use more information that can lead to a solution for your case.