snag.page

Every check ยท Page contents

Forms over HTTPS

content/forms

What it checks

Forms on the home page that post to http://.

Why it matters

What visitors type travels unencrypted, where it can be read or changed.

How to fix it

  1. Change each form's action to an https:// address, or make it relative.

Check a site for this and everything else: snag.page. More on page contents: Mixed content Libraries with known flaws Integrity on CDN files Generator tag Script hosts