Add Upgrade insecure requests

features/csp.yml

@@ -73,6 +73,5 @@ compat_features:
   - http.headers.Content-Security-Policy.style-src-attr
   - http.headers.Content-Security-Policy.style-src-elem
   - http.headers.Content-Security-Policy.unsafe-hashes
-  - http.headers.Content-Security-Policy.upgrade-insecure-requests
   - http.headers.Content-Security-Policy.worker-src
   - http.headers.Content-Security-Policy.worker_support

features/csp.yml.dist

@@ -115,19 +115,6 @@ compat_features:
   #   safari_ios: "9.3"
   - http.headers.Content-Security-Policy.frame-ancestors
 
-  # baseline: high
-  # baseline_low_date: 2018-04-30
-  # baseline_high_date: 2020-10-30
-  # support:
-  #   chrome: "43"
-  #   chrome_android: "43"
-  #   edge: "17"
-  #   firefox: "42"
-  #   firefox_android: "42"
-  #   safari: "10.1"
-  #   safari_ios: "10.3"
-  - http.headers.Content-Security-Policy.upgrade-insecure-requests
-
   # baseline: high
   # baseline_low_date: ≤2018-10-02
   # baseline_high_date: ≤2021-04-02

features/upgrade-insecure-requests.yml

@@ -0,0 +1,7 @@
+name: Upgrade insecure requests
+description: The `Upgrade-Insecure-Requests` HTTP header instructs a user agent to upgrade insecure resource requests to secure transport before fetching them.
+spec: https://w3c.github.io/webappsec-upgrade-insecure-requests/
+group: security
+compat_features:
+  - http.headers.Upgrade-Insecure-Requests
+  - http.headers.Content-Security-Policy.upgrade-insecure-requests

features/upgrade-insecure-requests.yml.dist

@@ -0,0 +1,42 @@
+# Generated from: upgrade-insecure-requests.yml
+# Do not edit this file by hand. Edit the source file instead!
+
+status:
+  baseline: high
+  baseline_low_date: 2018-04-30
+  baseline_high_date: 2020-10-30
+  support:
+    chrome: "44"
+    chrome_android: "44"
+    edge: "17"
+    firefox: "48"
+    firefox_android: "48"
+    safari: "10.1"
+    safari_ios: "10.3"
+compat_features:
+  # baseline: high
+  # baseline_low_date: 2018-04-30
+  # baseline_high_date: 2020-10-30
+  # support:
+  #   chrome: "43"
+  #   chrome_android: "43"
+  #   edge: "17"
+  #   firefox: "42"
+  #   firefox_android: "42"
+  #   safari: "10.1"
+  #   safari_ios: "10.3"
+  - http.headers.Content-Security-Policy.upgrade-insecure-requests
+
+  # ⬇️ Same status as overall feature ⬇️
+  # baseline: high
+  # baseline_low_date: 2018-04-30
+  # baseline_high_date: 2020-10-30
+  # support:
+  #   chrome: "44"
+  #   chrome_android: "44"
+  #   edge: "17"
+  #   firefox: "48"
+  #   firefox_android: "48"
+  #   safari: "10.1"
+  #   safari_ios: "10.3"
+  - http.headers.Upgrade-Insecure-Requests