# origin_not_allowed

> HTTP 403 · https://cogdepot.com/problems/origin_not_allowed

The call carries an Origin header that is not the cogDepot storefront. The want routes answer browser calls only from the storefront; a script or an agent sends no Origin header and is not affected. Nothing was changed.