Skip to main content
Checks whether HTTP URLs redirect to HTTPS
Rule IDsecurity/http-to-https
CategorySecurity
ScopeSite-wide
Severitywarning
Weight3/10

​
Solution

Ensure all HTTP URLs redirect to their HTTPS equivalents using permanent (301) redirects. This consolidates link equity and avoids mixed indexing. Configure your server to enforce HTTPS globally and verify that both the homepage and key internal URLs redirect correctly. WARNING: This rule makes external HTTP requests to probe redirect behavior.

​
Options

This rule supports the following configuration options:
OptionTypeDefaultDescription
sampleLimitunknownundefinedMaximum number of pages to probe for HTTP→HTTPS redirects

​
Configuration Example

squirrel.toml
[rules."security/http-to-https"]
sampleLimit = undefined

​
Enable / Disable

​
Disable this rule

squirrel.toml
[rules]
disable = ["security/http-to-https"]

​
Disable all Security rules

squirrel.toml
[rules]
disable = ["security/*"]

​
Enable only this rule

squirrel.toml
[rules]
enable = ["security/http-to-https"]
disable = ["*"]