Audit rules
Form Submits Over HTTP
A form on the https page submits to an http:// address, so its data travels unencrypted. In a QuikSEO audit, a failure of this rule has info severity and counts against the score. Below are the exact condition, its exceptions and the sources behind it, followed by the other rules of the same group.
security.unsafe_formsInfo01 — Definition
How This Rule Is Checked
The rule is a pure function of the fetched page: no extra requests, no account settings. The same input always gives the same result.
Rule Severity and Score
- Rule id
security.unsafe_forms- Group
- Security
- Severity of a failure
- Info
- Counts in the score
- Yes, whenever it applies to the page
- Required for a score
- No
- Replaces the check
unsafe_forms
Condition and Exceptions
- Condition
- https page with a form whose action resolves to http:// → fail (info)
- Exceptions
- No forms → not_applicable
Sources
02 — Security
Other Rules in This Group
The other checks of the same group, each with its own condition and sources.
- X-Content-Type-Options Missingsecurity.content_type_options
- Content Security Policy Missingsecurity.csp
- Framing Protection Missingsecurity.frame_protection
- HSTS Missingsecurity.hsts
- Permissions Policy Missingsecurity.permissions_policy
- Referrer Policy Missingsecurity.referrer_policy
- Flagged by Safe Browsingsecurity.safe_browsing