Repository: quarkusio/quarkus
Issue: JaxRS Security wrong content-type

**Describe the bug**
When security is enabled, and you are calling a JaxRS endpoint, without any matching roles.
The "Forbidden" is return as plain text, but content-type is "application/json".

**Expected behavior**
Returned with content-type matching content.

**Actual behavior**
The "Forbidden" is return as plain text, but content-type is "application/json".


**To Reproduce**
Reproducer can be found in this repo: https://github.com/SlyngDK/quarkus-jaxrs-security-wrong-content-type

**Configuration**
```properties
See reproducer ^^^

```

**Environment (please complete the following information):**
 - Output of `java -version`: openjdk version "1.8.0_232"
 - Quarkus version or git rev: 1.0.1.Final

**Additional context**
This there changed some thing about default returned Content-Type???
Maybe this is also affecting other areas.
I have seen same problem with a ContainerRequestFilter calling requestContext.abortWith(), which not setting the MediaType on the response, changed with the new versions.


Changed files:
extensions/smallrye-jwt/deployment/src/test/java/io/quarkus/jwt/test/RolesAllowedUnitTest.java
extensions/resteasy/runtime/src/main/java/io/quarkus/resteasy/runtime/ForbiddenExceptionMapper.java

diff --git a/extensions/resteasy/runtime/src/main/java/io/quarkus/resteasy/runtime/ForbiddenExceptionMapper.java b/extensions/resteasy/runtime/src/main/java/io/quarkus/resteasy/runtime/ForbiddenExceptionMapper.java
index b9ed6e3e88a..8a4a5c4f291 100644
--- a/extensions/resteasy/runtime/src/main/java/io/quarkus/resteasy/runtime/ForbiddenExceptionMapper.java
+++ b/extensions/resteasy/runtime/src/main/java/io/quarkus/resteasy/runtime/ForbiddenExceptionMapper.java
@@ -14,8 +14,9 @@
 @Provider
 @Priority(Priorities.USER + 1)
 public class ForbiddenExceptionMapper implements ExceptionMapper<ForbiddenException> {
+
     @Override
     public Response toResponse(ForbiddenException exception) {
-        return Response.status(403).entity("Forbidden").build();
+        return Response.status(403).build();
     }
 }
diff --git a/extensions/smallrye-jwt/deployment/src/test/java/io/quarkus/jwt/test/RolesAllowedUnitTest.java b/extensions/smallrye-jwt/deployment/src/test/java/io/quarkus/jwt/test/RolesAllowedUnitTest.java
index f81495b569d..b9983c650c2 100644
--- a/extensions/smallrye-jwt/deployment/src/test/java/io/quarkus/jwt/test/RolesAllowedUnitTest.java
+++ b/extensions/smallrye-jwt/deployment/src/test/java/io/quarkus/jwt/test/RolesAllowedUnitTest.java
@@ -170,8 +170,6 @@ public void callEcho2() {
                 .get("/endp/echo2").andReturn();
 
         Assertions.assertEquals(HttpURLConnection.HTTP_FORBIDDEN, response.getStatusCode());
-        String replyString = response.body().asString();
-        Assertions.assertEquals("Forbidden", replyString);
     }
 
     /**
@@ -245,8 +243,6 @@ public void echoWithToken2() throws Exception {
                 .get("/endp/echo").andReturn();
 
         Assertions.assertEquals(HttpURLConnection.HTTP_FORBIDDEN, response.getStatusCode());
-        String replyString = response.body().asString();
-        Assertions.assertEquals("Forbidden", replyString);
     }
 
     /**