It appears to be related to the ‘global edge security’ suite on WPEngine blocking anything containing odd characters (i can paste plain text, but the moment i introduce an apostrophe, it gives me the 403 – at least, that’s the running theory for now).
