amphtml

amphtml copied to clipboard

Currently adding the Content Security meta tag to upgrade insecure requests…

<meta http-equiv="Content-Security-Policy" content="upgrade-insecure-requests">

results in the error message…

The attribute 'http-equiv' may not appear in tag 'meta name= and content='.

Can we add support for it?

(CC: @mikewest, @cramforce)

Since we would strip this on cache delivery (that has its own, different CSP), I think the right solution is just to use a HTTP header instead.

@cramforce Pleading for re-opening. This issue seems to pop up again with the rise of JAMstack static site builders where people cannot necessarily modify raw headers.

Hmm, I'm certainly not opposed to doing this. @Gregable

This issue has been automatically marked as stale because it has not had recent activity. It will be closed in 7 days if no further activity occurs. Thank you for your contributions.

I have stopped caring personally, but it still sounds like a good feature to support. So, stale 🤖, keep this open, please.

This issue has been automatically marked as stale because it has not had recent activity. It will be closed in 7 days if no further activity occurs. Thank you for your contributions.

I have stopped caring personally, but it still sounds like a good feature to support. So, stale 🤖, keep this open, please.