From 4283006c475cb0120f9174b71d0796adf7a143f9 Mon Sep 17 00:00:00 2001
From: Rob Hudson <robhudson@mozilla.com>
Date: Mon, 23 Dec 2024 10:44:15 -0800
Subject: [PATCH] Disable `upgrade-insecure-requests` for local dev

---
 bedrock/settings/__init__.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bedrock/settings/__init__.py b/bedrock/settings/__init__.py
index 57cf26bb407..03dcc75729d 100644
--- a/bedrock/settings/__init__.py
+++ b/bedrock/settings/__init__.py
@@ -111,7 +111,7 @@
         # support older browsers (mainly Safari)
         "frame-src": _csp_child_src,
         "frame-ancestors": [csp.constants.NONE],
-        "upgrade-insecure-requests": True,
+        "upgrade-insecure-requests": False if DEBUG else True,
         "report-uri": csp_report_uri,
     },
 }