Upgrade-Insecure-Requests
The Upgrade-Insecure-Requests header tells the browser to automatically upgrade all HTTP resource requests in the page to HTTPS.
Purpose
To declare that the site supports HTTPS so the browser auto-upgrades internal HTTP resource references, eliminating mixed content.
Mechanism
The server sends Upgrade-Insecure-Requests: 1; the browser rewrites http:// resources in the page to https://. If HTTPS is unavailable it falls back to HTTP (no blocking). Combine with CSP upgrade-insecure-requests for enforcement.
Use cases
- Automatic HTTPS upgrade
- Mixed-content elimination
- Site migration
Related tools
HTTP Status Codes
Reference table of common HTTP status codes (1xx-5xx) with names, categories, and descriptions. Free, private, and 100% client-side. TOOL
URL Parser
Parse a URL into its components: protocol, host, path, query, hash, port, username, and password. Free, private, and 100% client-side. TOOL