Skip to main content
Checks that form actions use HTTPS
Rule IDsecurity/form-https
CategorySecurity
ScopePer-page
Severitywarning
Weight6/10

​
Solution

Forms should always submit to HTTPS URLs to protect user data in transit. Update form action attributes from http:// to https://. For relative URLs, ensure the page itself is on HTTPS. Be especially careful with login forms, payment forms, and any forms collecting personal data. Browsers may warn users about insecure form submissions.

​
Enable / Disable

​
Disable this rule

squirrel.toml
[rules]
disable = ["security/form-https"]

​
Disable all Security rules

squirrel.toml
[rules]
disable = ["security/*"]

​
Enable only this rule

squirrel.toml
[rules]
enable = ["security/form-https"]
disable = ["*"]