This sounds like an issue with a #waf (web application firewall), not directly #friendica . You should check the logs which rule is triggered and check if it can be disabled.