Forum Discussion
Philip_Jonsson_
Altocumulus
AltocumulusSEC7111 HTTP Security Compromised Generated by a JavaScript.
Hey everyone!
I just ran into an issue that I haven't seen before. Let me give you some background:
We have a backend web application running only on port 80 and publish this through a stan...
Giel
Nimbostratus
NimbostratusHi Philip,
A bit of an alternative approach here could be to insert this HTTP header:
Content-Security-Policy: upgrade-insecure-requests;
This should make your browser automatically rewrite any insecurely served content to HTTPS.