Upgrade-Insecure-Requests
Request headers
Asks the server to upgrade any plain http links to https.
| On the wire | Upgrade-Insecure-Requests: … |
|---|---|
| Category | Request headers |
Headers the browser attaches when it sends to the server.
How to read this
- The first digit of a status code carries the meaning: 4 means the request, 5 means the server.
- 404 means "not there"; 403 means "there, but not for you". Swapping them makes debugging slower.
- Header names are case-insensitive — Content-Type and content-type are the same header.
- Caching and CORS problems usually come down to one header line, visible in the browser’s network tab.
Frequently asked questions
QWhat does HTTP Upgrade-Insecure-Requests mean?
Asks the server to upgrade any plain http links to https.
QWhat does Upgrade-Insecure-Requests look like on the wire?
It travels as Upgrade-Insecure-Requests: …
QWhere does Upgrade-Insecure-Requests appear?
In request headers.
QWhat group does Upgrade-Insecure-Requests belong to?
The request headers group; the rest of that group is listed further down.