Unsafe forms checker

What is an Unsafe Forms Checker?

The Unsafe Forms Checker scans a page served over HTTPS for any <form> element whose action attribute submits to a plain HTTP (non-HTTPS) URL, which browsers flag as a mixed-content security risk.

Why This Matters

• Data interception — Form data submitted to an HTTP endpoint travels unencrypted and can be intercepted or modified in transit.
• Browser warnings — Chrome and other browsers show explicit "Not Secure" warnings directly on forms that submit insecurely, damaging user trust.
• Easy to miss — This often happens after a site migrates to HTTPS but leaves a legacy third-party form action untouched.