squirrelscan
GitHub

HTTPS Downgrade

Detects links from HTTPS pages to HTTP destinations

Detects links from HTTPS pages to HTTP destinations

Rule ID links/https-downgrade
Category Links
Scope Per-page
Severity warning
Weight 5/10

Solution

Links from HTTPS to HTTP pages create security warnings and break the trust chain. Users may see ‘not secure’ warnings. Update all links to use HTTPS. If the target site doesn’t support HTTPS, consider if you really need to link there. For internal links, ensure your entire site uses HTTPS.

Enable / Disable

Disable this rule

[rules]
disable = ["links/https-downgrade"]
[rules]
disable = ["links/*"]

Enable only this rule

[rules]
enable = ["links/https-downgrade"]
disable = ["*"]

Type to search…

↑↓ navigate↵ openesc close