Upgrade-Insecure-Requests ãããã¼
Baseline
åºãå©ç¨å¯è½
ãã®æ©è½ã¯åºãå®è£ ããã¦ãããå¤ãã®ãã¼ã¸ã§ã³ã®ç«¯æ«ããã©ã¦ã¶ã¼ã§åä½ãã¾ãã2018å¹´4æ以éããã¹ã¦ã®ãã©ã¦ã¶ã¼ã§å©ç¨å¯è½ã§ãã
HTTP ã® Upgrade-Insecure-Requests ãªã¯ã¨ã¹ããããã¼ã¯ãæå·åããã³èªè¨¼ãããã¬ã¹ãã³ã¹ã«å¯¾ããã¯ã©ã¤ã¢ã³ãã®è¨å®ã表ãä¿¡å·ããµã¼ãã¼ã«éä¿¡ãã CSP ã® upgrade-insecure-requests ãã£ã¬ã¯ãã£ããæ£å¸¸ã«å¦çã§ãããã¨ã示ãã¾ãã
| ãããã¼ç¨®å¥ | ãªã¯ã¨ã¹ããããã¼ |
|---|---|
| ç¦æ¢ãªã¯ã¨ã¹ããããã¼ | ããã |
æ§æ
Upgrade-Insecure-Requests: <boolean>
ãã£ã¬ã¯ãã£ã
<boolean>-
1㯠'true' ã表ãããã®ãã£ã¼ã«ãã§å¯ä¸ã®æå¹ãªå¤ã§ãã
ä¾
Upgrade-Insecure-Requests ã®ä½¿ç¨
ã¯ã©ã¤ã¢ã³ãã¯ã次ã®ããã« upgrade-insecure-requests ã®ã¢ããã°ã¬ã¼ãã¡ã«ããºã ã«å¯¾å¿ãã¦ãããã¨ããµã¼ãã¼ã«éç¥ãã¾ãã
GET / HTTP/1.1
Host: example.com
Upgrade-Insecure-Requests: 1
ããã§ããµã¼ãã¼ã¯å®å
¨ãªãã¼ã¸ã§ã³ã®ãµã¤ãã«ãªãã¤ã¬ã¯ãã§ãã¾ãã Vary ãããã¼ã使ç¨ãããã¨ã§ãã¢ããã°ã¬ã¼ãã¡ã«ããºã ã«å¯¾å¿ãã¦ããªãã¯ã©ã¤ã¢ã³ãã«ãã£ãã·ã¥ãããµã¤ããæä¾ãããªããªãã¾ãã
Location: https://example.com/
Vary: Upgrade-Insecure-Requests
ä»æ§æ¸
| ä»æ§æ¸ |
|---|
| Upgrade Insecure Requests # preference |
ãã©ã¦ã¶ã¼ã®äºææ§
é¢é£æ å ±
Content-Security-Policy- CSP
upgrade-insecure-requestsãã£ã¬ã¯ãã£ã - HTTP ãã£ãã·ã¥: Vary ããã³
Varyãããã¼