WordPress.org
Get WordPress

Make WordPress Core

Changes between Initial Version and Version 1 of Ticket #28521, comment 18


Ignore:
Timestamp:
05/11/2019 12:37:08 AM (7 years ago)
Author:
westonruter
Comment:

Legend:

Unmodified
Added
Removed
Modified

  • Ticket #28521, comment 18

    initial v1  
    11116. Add redirect from HTTP to HTTPS for requests that don't already do this via `redirect_canonical()`.
    12127. Add `Content-Security-Policy: upgrade-insecure-requests` response header if HTTPS is enabled. This is supported in all browsers other than IE11 and avoids the need to do messy s/http/https/ string replacements in `the_content`, enqueued scripts/styles, etc.
    13 8. Add HSTS response header.
     138. ~~Add HSTS response header.~~
    1414
    1515Thoughts? Anything else I'm forgetting?