paragonie / csp-builder

Build Content-Security-Policy headers from a JSON file (or build them programmatically)

https://paragonie.com/projects

My browser keeps ignoring this.

Nenglish7 opened this issue 6 years ago · comments

Nicholas English commented 6 years ago

CSP14309: Unknown directive 'upgrade-insecure-requests' in Content-Security-Policy - directive will be ignored.

Browser: Microsoft Edge

Vincent commented 6 years ago

That's because upgrade-insecure-requests is only supported in Edge 17+: https://developer.microsoft.com/en-us/microsoft-edge/platform/status/cspupgradeinsecurerequestsdirective/