Skip to content
This repository was archived by the owner on Jul 21, 2025. It is now read-only.

Commit 7ccd7db

Browse files
lgarronlgarron
committed
Add upgrade.badssl.com for upgrade-insecure-requests. Closes #78.
1 parent f226d1a commit 7ccd7db

File tree

5 files changed

+111
-0
lines changed

5 files changed

+111
-0
lines changed

‎domains/misc/badssl.com/index.html‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -220,6 +220,7 @@
220220
<a href="https://mixed.badssl.com/mixed/font" class="more bad no-interstitial">mixed/font</a>
221221
<a href="https://long-extended-subdomain-name-containing-many-letters-and-dashes.badssl.com/" class="more good">long-extended-subdomain-name-containing-many-letters-and-dashes</a>
222222
<a href="https://longextendedsubdomainnamewithoutdashesinordertotestwordwrapping.badssl.com/" class="more good">longextended<wbr>subdomainname<wbr>withoutdashes<wbr>inordertotest<wbr>wordwrapping</a>
223+
<a href="https://upgrade.badssl.com/" class="more good">upgrade</a>
223224
<div class="browser-info">
224225
<span id="ua"></span>
225226
<br>

‎domains/mixed/upgrade.badssl.com-http/upgrade-test/upgrade-test.svg‎

Lines changed: 12 additions & 0 deletions
Loading

‎domains/mixed/upgrade.badssl.com-https/index.html‎

Lines changed: 59 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,59 @@
1+
<!doctype html>
2+
<html>
3+
<head>
4+
<title>upgrade.badssl.com</title>
5+
<link rel="shortcut icon" href="/icons/favicon-green.ico"/>
6+
<link rel="apple-touch-icon" href="/icons/icon-green.png"/>
7+
<style>
8+
html, body {
9+
background: #484;
10+
11+
margin: 0;
12+
padding: 0;
13+
14+
height: 100%;
15+
display: -webkit-flexbox;
16+
display: -ms-flexbox;
17+
display: -webkit-flex;
18+
display: flex;
19+
-webkit-align-items: center;
20+
align-items: center;
21+
-webkit-justify-content: center;
22+
justify-content: center;
23+
}
24+
h1 {
25+
color: white;
26+
text-align: center;
27+
font-family: "Source Code Pro", Monaco, Consolas, "Courier New", monospace, Impact;
28+
font-size: 5em;
29+
font-size: 8vw;
30+
text-shadow:
31+
0 0 20px rgba(255, 255, 255, 0.5),
32+
0 0 40px rgba(255, 255, 255, 0.5),
33+
0 0 60px rgba(255, 255, 255, 0.5);
34+
}
35+
.footer {
36+
background: rgba(0, 0, 0, 0.25);
37+
38+
position: fixed;
39+
width: 80vw;
40+
bottom: 0;
41+
left: 0;
42+
padding: 2vh 10vw;
43+
44+
font-family: Helvetica, Tahoma, sans-serif;
45+
text-align: center;
46+
color: white;
47+
font-size: 6vw;
48+
}
49+
#http-vs-https {
50+
width: 80vw;
51+
vertical-align: middle;
52+
}
53+
</style>
54+
</head>
55+
<body>
56+
<h1>upgrade.badssl.com</h1>
57+
<div class="footer"><img id="http-vs-https" src="http://upgrade.badssl.com/upgrade-test/upgrade-test.svg" title="This is an image with an HTTP source location specified. If upgrade-insecure-requests is working, the source should be rewritten to HTTPS. The image will vary depending on the outcome."></div>
58+
</body>
59+
</html>

‎domains/mixed/upgrade.badssl.com-https/upgrade-test/upgrade-test.svg‎

Lines changed: 12 additions & 0 deletions
Loading

‎domains/mixed/upgrade.badssl.com.conf‎

Lines changed: 27 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,27 @@
1+
server {
2+
listen 80;
3+
server_name upgrade.badssl.com;
4+
5+
location = / {
6+
return 301 https://$server_name$request_uri;
7+
}
8+
9+
location / {
10+
root /var/www/badssl/domains/mixed/upgrade.badssl.com-http;
11+
try_files $uri $uri/ =404;
12+
}
13+
14+
}
15+
16+
server {
17+
listen 443;
18+
server_name upgrade.badssl.com;
19+
20+
include /var/www/badssl/nginx-includes/wildcard.normal.conf;
21+
include /var/www/badssl/nginx-includes/tls-defaults.conf;
22+
include /var/www/badssl/common/common.conf;
23+
24+
add_header Content-Security-Policy "upgrade-insecure-requests";
25+
26+
root /var/www/badssl/domains/mixed/upgrade.badssl.com-https;
27+
}

0 commit comments

Comments
 (0)