Ticket #29727: 29727.2.diff

wp-includes/class-wp.php

@@ -437 +437 @@
                         }
                 }
 
+                if ( is_ssl() ) {
+                        $headers['Content-Security-Policy'] = 'upgrade-insecure-requests';
+                }
+                
+                
                 /**
                  * Filter the HTTP headers before they're sent to the browser.
                  *