SecurityException Status Codes

No, CI4 returns 403 response when a CSRF error happens.
See https://codeigniter4.github.io/CodeIgnit...-exception

PHP Code:

<?php

namespace App\Controllers;

use CodeIgniter\Security\Exceptions\SecurityException;

class Home extends BaseController
{
    public function index()
    {
        throw SecurityException::forDisallowedAction();
    }
} 


Code:

$ curl -D - -s  -o /dev/null http://localhost:8080
HTTP/1.1 403 Forbidden
Host: localhost:8080
Date: Wed, 27 Mar 2024 22:48:17 GMT
Connection: close
X-Powered-By: PHP/7.4.33
Cache-Control: no-store, max-age=0, no-cache
Content-Type: application/json; charset=UTF-8

ci-phpunit-test | CodeIgniter Testing Guide | CodeIgniter 3 to 4 Upgrade Helper