10042—HTTPS to HTTP Insecure Transition in Form Post
PUBLISHEDsecurity alertMedium
Passive
Metadata
摘要
This check identifies secure HTTPS pages that host insecure HTTP forms. The issue is that a secure page is transitioning to an insecure page when data is uploaded through a form. The user may think they’re submitting data to a secure page when in fact they are not.
解决方案
Ensure sensitive data is only sent over secured HTTPS channels.
其他信息
The response to the following request over HTTPS included an HTTP form tag action attribute value: https://example.com The context was: <form name="someform" action="http://example.com/processform">