DEV Community

Archit Awasthi
Archit Awasthi

Posted on

"upgrade-insecure-requests works on localhost and breaks on every other device"

The CSP allows no external host in any directive, so the page cannot contact anything even if a dependency tried. A build step drives a headless browser across the site and fails if any request leaves the origin.
www.toolsholic.com

Top comments (0)