Saving a page in the block editor silently fails – the content that was just typed simply doesn’t persist, no error shown – while everything else on the site works completely normally.
⚡ Quick Fix (TL;DR)
The Culprit: A GoDaddy server-level Web Application Firewall – separate from and completely invisible to any site-level firewall plugin – blocked the save specifically because the page contained an whose id referenced "url" sitting next to a URL-shaped placeholder value. That specific combination matched a pattern the firewall treats as a potential malicious payload, even though it was entirely legitimate form markup.
The Fix: Found only through one-variable-at-a-time bisection – removing or renaming individual page elements until the save finally succeeded. Once isolated, renaming the input's id and placeholder to avoid that specific pattern fixed it. Worth remembering a host-level WAF like this exists entirely outside any WordPress security plugin, so it won't show up in that plugin's own logs at all.
Rather not untangle this yourself? Our Done-For-You team handles exactly this kind of thing, start to finish.
See DFY options → Was this helpful? Thanks for the feedback!
Tagged in :