diff --git a/packages/core/strapi/lib/middlewares/security.js b/packages/core/strapi/lib/middlewares/security.js index b54b7b2c1e..f32bb0a8a7 100644 --- a/packages/core/strapi/lib/middlewares/security.js +++ b/packages/core/strapi/lib/middlewares/security.js @@ -14,6 +14,7 @@ const defaults = { 'connect-src': ["'self'", 'https:'], 'img-src': ["'self'", 'data:', 'blob:'], 'media-src': ["'self'", 'data:', 'blob:'], + upgradeInsecureRequests: null, }, }, xssFilter: false,