diff --git a/.htaccess b/.htaccess index 33b0033269..91d8a9e6da 100755 --- a/.htaccess +++ b/.htaccess @@ -92,11 +92,16 @@ AddType application/font-woff .woff .woff2 ExpiresByType application/font-woff "access plus 1 month" -# Force SSL/https - Uncomment if you need it -# RewriteCond %{HTTPS} !=on -# RewriteRule .* https://%{HTTP_HOST}%{REQUEST_URI} [R=301,L] - -# Resolving insecure site and mixed-content warnings -# -# Header always set Content-Security-Policy "upgrade-insecure-requests;" -# +# Force SSL/HTTPS +# We recommend you place this block in your VirtualHost config rather +# than uncommenting it below. However, if you have no other way, +# feel free to uncomment it, but please remember that this file will +# be overwritten during your next Chamilo update. +# Also note this will only work if you have an SSL certificate +# configured elsewhere in your Apache configuration. + +#RewriteCond %{HTTPS} !=on +#RewriteRule .* https://%{HTTP_HOST}%{REQUEST_URI} [R=301,L] +# +# Header always set Content-Security-Policy "upgrade-insecure-requests;" +#