Security check
Insecure forms
Resolves every form’s action URL (a missing action means the page itself) and flags those that submit over http://.
- Category
- Security
- Importance
- High importance
- Check id
- insecure-forms
How the result is decided
- PassNo forms, or every form submits over HTTPS.
- FailAt least one form submits over HTTP. On an HTTP page that includes forms without an action.
Why it matters
Whatever people type into such a form, passwords and emails included, travels unencrypted.
How to fix it
Serve the page over HTTPS and make every form action an https:// URL or a relative path.
After the fix, open the page’s report and choose Run again to confirm it passes.