强制使用https访问的方法-xyphf

75 阅读1分钟

Nginx服务器,在 server {  ... } 中插入

rewrite ^(.*)$ https://$host$1 permanent;

.htaccess文件,适用于Apache 配置文件的<Directory>标签内

RewriteEngine on
RewriteBase /yourfolder
RewriteCond %{SERVER_PORT} !^443$
RewriteRule ^.*$ https://%{SERVER_NAME}%{REQUEST_URI} [L,R]

javascript 脚本,适用于IIS服务器的 403-4.htm 或者 403.htm

<script type="text/javascript">
var url = window.location.href;
if (url.indexOf("https") < 0) {
    url = url.replace("http:", "https:");
    window.location.replace(url);
}
</script>

html 文件,head 中加入如下meta

<meta http-equiv="Content-Security-Policy" content="upgrade-insecure-requests">