Upgrade Insecure Requests

- CR

Declare that browsers should transparently upgrade HTTP resources on a website to HTTPS.

Chrome

  1. ❌ 4 - 42: Not supported
  2. ✅ 43 - 153: Supported
  3. ✅ 154: Supported
  4. ✅ 155 - 157: Supported

Edge

  1. ❌ 12 - 16: Not supported
  2. ✅ 17 - 151: Supported
  3. ✅ 152: Supported

Safari

  1. ❌ 3.1 - 10: Not supported
  2. ✅ 10.1 - 26.6: Supported
  3. ✅ 27: Supported
  4. ✅ 27.1 - TP: Supported

Firefox

  1. ❌ 2 - 41: Not supported
  2. ✅ 42 - 155: Supported
  3. ✅ 156: Supported
  4. ✅ 157 - 159: Supported

Opera

  1. ❌ 9 - 29: Not supported
  2. ✅ 30 - 134: Supported
  3. ✅ 135: Supported

IE

  1. ❌ 5.5 - 10: Not supported
  2. ❌ 11: Not supported

Chrome for Android

  1. ✅ 152: Supported

Safari on iOS

  1. ❌ 3.2 - 10.2: Not supported
  2. ✅ 10.3 - 26.6: Supported
  3. ✅ 27.0: Supported
  4. ✅ 27.1 - 27.2: Supported

Samsung Internet

  1. ✅ 4 - 29: Supported
  2. ✅ 30: Supported

Opera Mini

  1. ❌ all: Not supported

Opera Mobile

  1. ❌ 10 - 12.1: Not supported
  2. ✅ 80: Supported

UC Browser for Android

  1. ✅ 15.5: Supported

Android Browser

  1. ❌ 2.1 - 4.4.4: Not supported
  2. ✅ 152: Supported

Firefox for Android

  1. ✅ 156: Supported

QQ Browser

  1. ✅ 14.9: Supported

Baidu Browser

  1. ✅ 13.52: Supported

KaiOS Browser

  1. ✅ 2.5: Supported
  2. ✅ 3: Supported

The HTTP header is Content-Security-Policy: upgrade-insecure-requests. Alternatively, the HTML tag is <meta http-equiv="Content-Security-Policy" content="upgrade-insecure-requests">.

Resources:
WebKit feature request bug
MDN Web Docs - Upgrade Insecure Requests
Demo Website