UserAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36
Steps to reproduce the problem:
1. two HTML documents (doc1.html, doc2.html) on server www.some.host linking to each other via <a href="http://www.some.host/doc2.html">link</a> or <a href="http://www.some.host/doc1.html">link</a>
2. server sends 'Content-Security-Policy: upgrade-insecure-requests' with responses to requests for both documents
What is the expected behavior?
The navigation request from doc1.html to doc2.html should be done with https.
What went wrong?
The navigation request from doc1.html to doc2.html is done with http.
Did this work before? N/A
Does this work in other browsers? N/A
Chrome version: 63.0.3239.108 Channel: stable
OS Version: 10.0
Flash Version:
Unfortunately I only have a test case which is not publicly available.
Both documents reference subresources (script, style, images) via http. All are requested with https.
I also tested with Firefox 57.0.2, which behaves as expected. I did not test with Safari.
The Chrome version used for my test is Version "63.0.3239.108 (Official Build) (64-bit)" on Windows 10.
Comment 1 by krajshree@chromium.org
, Dec 20 2017